Security Controls CV0-004 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company uses a cloud identity provider (IdP) for single sign-on (SSO). They want to enforce multi-factor authentication (MFA) for all users accessing sensitive applications. They also need to ensure that access is revoked promptly when an employee leaves. What should they do?

   • ADisable MFA to reduce friction, and rely on complex passwords.
   • BConfigure a conditional access policy that requires MFA for sensitive apps, and integrate the IdP with the HR system to automate account deprovisioning.
   • CUse a shared MFA token for all users to simplify the login process.
   • DRequire MFA only for new users, and manually disable accounts when employees leave.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary goal of an incident response plan in a cloud environment?

   • ATo eliminate the need for security monitoring
   • BTo minimize the impact of a security incident and restore normal operations quickly
   • CTo ensure that cloud services are always available
   • DTo prevent all security incidents from occurring
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company operates in a country with strict data sovereignty laws that require personal data to remain within the country's borders. They are using a public cloud provider that has a region in that country. However, the provider's support team is located in another country and may need to access the data for troubleshooting. What should the company do to comply with data sovereignty?

   • AUse a private cloud with dedicated hardware, because public clouds cannot meet data sovereignty.
   • BEncrypt the data with a key held by the company, and allow support staff to access the data if they need to.
   • CEnsure that the data is stored in the in-country region and implement access controls to prevent support staff from accessing the data without explicit approval.
   • DMove the data to a region in another country to avoid the strict laws.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which component of identity and access management (IAM) is responsible for verifying the identity of a user attempting to access cloud resources?

   • AFederation
   • BAuthentication
   • CAuthorization
   • DAccounting
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company has a critical application running on a cloud VM. A vulnerability scan has identified a critical vulnerability in the application, but the patch requires a reboot, which will cause downtime. The company has a strict SLA that allows only 30 minutes of downtime per month. They have already used 20 minutes this month. What should they do?

   • AImplement a temporary workaround to mitigate the vulnerability, and schedule the patch for the next maintenance window.
   • BApply the patch during the next maintenance window, even if it exceeds the SLA, because security is more important.
   • CDo not apply the patch and hope the vulnerability is not exploited.
   • DApply the patch immediately and accept the downtime, because the vulnerability is critical.
   Reveal Solution Discussion Select an answer first