Explain Security Concerns, Measures, or Concepts of Cloud Operations. CLO-002 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company discovers that a cloud storage bucket containing customer data was exposed publicly due to a misconfiguration. The company needs to respond to this breach. Which action should the company take FIRST?

   • ARestrict access to the bucket by applying the correct access control policies.
   • BEncrypt the data in the bucket.
   • CNotify all affected customers about the breach.
   • DConduct a forensic analysis of the bucket's access logs.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A company stores sensitive customer data in a cloud database. The company must protect the data from unauthorized access, but it also needs to allow a data analytics team to run queries on the data. The analytics team should not be able to read the raw data values. Which approach should the company use?

   • AUse column-level encryption and provide the analytics team with decryption keys for only the columns they need.
   • BUse data masking to replace sensitive values with fictional data for the analytics team.
   • CProvide the analytics team with a read-only copy of the database.
   • DEncrypt the entire database and give the analytics team the master decryption key.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A company runs a customer-facing web application on a public cloud. During a routine review, the security team identifies a new type of ransomware that encrypts data and then deletes the original files. The company's current backup strategy takes a full backup once per week and stores it in the same cloud region as the production data. Which additional measure would BEST mitigate the impact of this specific threat?

   • AStore immutable, versioned backups in a separate region with restricted access.
   • BEnable multi-factor authentication on all user accounts.
   • CIncrease the frequency of full backups to daily, keeping them in the same region.
   • DDeploy a web application firewall in front of the application.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is the primary goal of data availability in cloud operations?

   • ATo reduce the cost of storing data in the cloud.
   • BTo ensure that data and services are accessible to authorized users when needed.
   • CTo protect data from unauthorized access.
   • DTo ensure data is not altered during transmission.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company is required by its industry regulations to regularly verify that its cloud environment meets security standards. The company wants to assess its security posture against a recognized framework. Which action should the company take?

   • ARun a vulnerability scan on all cloud resources.
   • BReview the cloud provider's security whitepapers.
   • CConduct a security audit using a third-party auditor.
   • DImplement multi-factor authentication for all users.
   Reveal Solution Discussion Select an answer first