Explain Security Concerns, Measures, or Concepts of Cloud Operations. CLO-002 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is an example of sensitive data in a cloud environment?

   • AA company's publicly available annual report.
   • BA list of employee social security numbers stored in a payroll database.
   • CA marketing brochure posted on the company's website.
   • DA list of internal department names and office locations.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company runs a critical application in a single cloud region. The security team has identified a threat: a regional outage could make the application unavailable. The company has a recovery time objective (RTO) of 2 hours and a recovery point objective (RPO) of 15 minutes. The current backup strategy takes a full backup every 12 hours and stores it in the same region. Which change would BEST address the threat while meeting the RTO and RPO?

   • ATake a full backup every hour and store it in a different region.
   • BIncrease backup frequency to every 6 hours and store backups in the same region.
   • CEnable multi-factor authentication on the cloud account.
   • DImplement continuous replication to a secondary region and automate failover.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the primary purpose of a vulnerability assessment in a cloud environment?

   • ATo simulate an attack to test the effectiveness of security controls.
   • BTo ensure that all cloud users have appropriate access permissions.
   • CTo monitor network traffic for malicious activity in real time.
   • DTo identify and quantify security weaknesses in the cloud infrastructure and applications.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is a key metric used to define backup and recovery procedures?

   • AEncryption key length — the number of bits in the encryption key.
   • BNetwork bandwidth — the speed of data transfer.
   • CNumber of users — the total count of authorized users.
   • DRecovery Time Objective (RTO) — the maximum acceptable time to restore services.
   Reveal Solution Discussion Select an answer first
6. 30application · easy

   A company runs an e-commerce platform on a public cloud. The platform experiences periodic traffic spikes, and the company wants to ensure that the application remains available to customers during these spikes. Which strategy would BEST support data availability?

   • AConduct regular security audits.
   • BImplement auto-scaling to add resources during high demand.
   • CEncrypt all data stored in the cloud.
   • DTake daily snapshots of the database.
   Reveal Solution Discussion Select an answer first