Explain Security Concerns, Measures, or Concepts of Cloud Operations. CLO-002 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A marketing company stores customer email addresses and purchase history in a cloud database. This data is used for targeted advertising and is not intended for public access. The company wants to classify this data to apply appropriate security controls. How should this data be categorized?

   • AEncrypted data, because encryption determines the classification.
   • BSensitive data, because it is not public and requires protection from unauthorized access.
   • CPublic data, because it is used for marketing purposes.
   • DPrivate data, because it is stored in a private cloud.
   Reveal Solution Discussion Select an answer first
2. 32application · easy

   A company is deploying a new web server in the cloud. The security team wants to reduce the attack surface by disabling unnecessary services and closing unused ports. Which process should the company follow?

   • AApply system hardening guidelines to the server.
   • BRun a vulnerability scan after deployment.
   • CEnable multi-factor authentication for the server.
   • DConduct a penetration test on the server.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which of the following is a key consideration when conducting penetration testing on a cloud environment?

   • AEnsuring that all test results are kept confidential from the organization.
   • BObtaining proper authorization from the cloud provider and the organization.
   • CUsing only automated tools to avoid human error.
   • DRunning the test only during business hours to minimize disruption.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which of the following is a common output of a security audit?

   • AA set of firewall rules that block all traffic.
   • BA list of all user passwords in plaintext.
   • CA report detailing findings, non-compliance issues, and recommendations for improvement.
   • DA backup of all critical data.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company is decommissioning a cloud virtual machine that contained customer financial data. The company wants to ensure that the data cannot be recovered after the VM is deleted. Which action should the company take?

   • AEncrypt the data and then delete the VM.
   • BMove the data to a backup and then delete the VM.
   • CUse the cloud provider's data sanitization feature to securely erase the storage before deletion.
   • DDelete the VM and rely on the provider's storage recycling process.
   Reveal Solution Discussion Select an answer first