Recognize Risk Management Concepts Related to Cloud Services. CLO-002 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of classifying cloud assets based on sensitivity and importance?

   • ATo determine the appropriate level of protection and handling for each asset
   • BTo decide which assets should be moved to a different cloud provider
   • CTo assign a monetary value to each asset for billing purposes
   • DTo automatically encrypt all classified assets
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   When is it appropriate for an organization to accept a cloud-related risk?

   • AWhen the cost of mitigation exceeds the potential impact and the risk is within the organization's risk appetite
   • BWhen the risk is likely to occur and has high impact
   • CWhen the risk is unknown and cannot be assessed
   • DWhen the cloud provider guarantees zero risk
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company maintains a document that lists all identified cloud-related risks, including their likelihood, impact, owner, and current status. The document is updated regularly and reviewed by management. What is this document called?

   • AAsset inventory
   • BIncident response plan
   • CRisk register
   • DBusiness impact analysis
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company has migrated several workloads to a public cloud provider. The security team discovers that some virtual machines (VMs) and storage accounts were not documented in the company's asset inventory. As a result, these assets are not being patched or monitored. The company wants to ensure that all cloud assets are tracked and that the most critical assets receive priority for security controls. What should the company do first?

   • AAssign ownership for all cloud assets to the security team.
   • BCreate a risk register and log all known risks, including the undocumented assets.
   • CPerform a complete asset inventory of all cloud resources and classify each asset by sensitivity and criticality.
   • DImmediately apply the most restrictive security controls to all cloud resources to reduce risk.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is considering moving its customer database to a cloud provider that uses proprietary data formats and APIs. The company is concerned that it may be difficult to move the data to another provider in the future. Which strategy would best mitigate the risk of vendor lock-in?

   • AUse open standards and portable data formats for the database.
   • BAvoid using any cloud provider and keep all data on-premises.
   • CSign a long-term contract with the cloud provider to ensure stability.
   • DStore all data in a proprietary format to maximize performance.
   Reveal Solution Discussion Select an answer first