Security Incidents CV0-004 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An organization wants to reduce the risk of privilege escalation in its cloud environment. They currently grant users broad permissions at the subscription level. Which strategy is most effective?

   • AEnable logging on all resources
   • BRequire multi-factor authentication (MFA) for all users
   • CUse a single administrative account for all management tasks
   • DImplement role-based access control (RBAC) with least privilege at the resource group level
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A cloud administrator wants to prevent a compromised low-privilege account from being able to escalate to administrator. Which control is most effective?

   • AUse a single sign-on (SSO) provider
   • BRequire all users to change their passwords every 90 days
   • CDisable the ability for users to create new role assignments
   • DEnable audit logging on all resources
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst discovers that a service account's API key was exposed in a public code snippet. The key has permissions to read and write to a critical database. The organization wants to prevent similar incidents in the future. Which combination of actions should be taken?

   • ARotate the key and add a comment in the code snippet warning others not to use it
   • BRotate the key and increase the database's backup frequency
   • CRotate the key, implement secret scanning in the CI/CD pipeline, and restrict the key's permissions to least privilege
   • DDisable the service account and create a new one with the same permissions
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   During a routine audit, a cloud administrator finds a set of API keys in a public GitHub repository. Which factor is MOST important when determining the impact of this credential leak?

   • AThe cloud provider's default retention period for API keys.
   • BThe number of times the repository has been forked or cloned.
   • CThe age of the GitHub repository where the keys were found.
   • DThe permissions and scope of access granted to the API keys.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An organization is updating its incident response plan. They want to ensure that the plan covers the detection and response to leaked credentials and privilege escalation. The plan must also comply with regulatory requirements for reporting breaches. Which element is MOST important to include in the plan?

   • AA schedule for annual security awareness training
   • BA detailed communication plan that includes internal stakeholders, external partners, and regulatory bodies
   • CA backup of the production environment
   • DA list of all employees' personal email addresses
   Reveal Solution Discussion Select an answer first