Security Controls CV0-004 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which network security control is designed to filter traffic based on predefined rules and can be used to block unauthorized access to a cloud network?

   • AVirtual private network (VPN)
   • BNetwork access control (NAC)
   • CIntrusion detection system (IDS)
   • DFirewall
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary purpose of implementing multi-factor authentication (MFA) as an access control mechanism?

   • ATo replace passwords with biometric verification
   • BTo verify identity using two or more independent factors
   • CTo ensure that users can access resources from any device
   • DTo require users to change their passwords frequently
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A multinational company stores personal data of EU citizens in a cloud environment. They must comply with GDPR, which requires that data transfers outside the EU be protected. The company wants to use a public cloud provider. What should they do to meet GDPR requirements?

   • AUse a private cloud with dedicated hardware, because only private clouds can be GDPR compliant.
   • BEncrypt all data and claim that encryption alone ensures GDPR compliance.
   • CChoose a cloud region located within the EU and implement appropriate safeguards for any data transfer outside the EU.
   • DStore all data in the US and rely on the provider's privacy policy.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A cloud administrator notices unusual spikes in outbound traffic from a virtual machine. They suspect a potential compromise. They need to confirm the issue and preserve evidence for investigation. What should they do first?

   • AEnable detailed network flow logs and capture a snapshot of the VM's memory and disk for forensic analysis.
   • BReboot the VM to clear any malicious processes, and then continue monitoring without logging.
   • CChange the VM's firewall rules to block all outbound traffic, and then ignore the incident.
   • DImmediately shut down the VM to stop the traffic, and then delete all logs to prevent the attacker from covering tracks.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company runs a web application in a cloud VNet. They want to detect and block malicious traffic before it reaches the application servers. They also need visibility into attempted attacks for later analysis. Which set of controls should they deploy?

   • AUse a web application firewall (WAF) only, and rely on the application's own error logs.
   • BDeploy only a network firewall with default rules and no logging.
   • CConfigure a network firewall with allow/deny rules and enable an intrusion detection system (IDS) that logs alerts.
   • DEnable only an intrusion prevention system (IPS) that automatically drops malicious traffic without logging.
   Reveal Solution Discussion Select an answer first