6.1 Evaluate Cloud Security Controls and Configurations to Identify Indicators of Misconfiguration (IOMs), Vulnerabilities And/or High-Risk Practices CCCS Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has a cloud environment with multiple workloads. The security team finds that the production and development environments are in the same virtual network, and there is no network segmentation between them. Which high-risk practice is present?

   • ADisabled logging
   • BInadequate network segmentation
   • CLack of encryption
   • DExcessive privilege
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A cloud environment stores sensitive data in a database without encryption at rest. How should this be classified?

   • AAs an indicator of misconfiguration (IOM)
   • BAs a high-risk practice
   • CAs a preventive control
   • DAs a vulnerability in the application code
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security analyst is evaluating a cloud environment and finds that a web server is running an outdated version of Apache with a known remote code execution vulnerability. The server is behind a load balancer that only allows HTTP/HTTPS traffic. Which finding should the analyst report?

   • ADetective control
   • BVulnerability
   • CIOM
   • DHigh-risk practice
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security analyst is reviewing a cloud environment and finds that a database has a configuration that allows any user with 'db_owner' role to export data. The database also has a known SQL injection vulnerability in a stored procedure. Which finding is more critical?

   • AThe SQL injection vulnerability
   • BThe db_owner role configuration
   • CNeither is critical
   • DBoth are equally critical
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a common indicator of misconfiguration (IOM) in a cloud environment?

   • AA network security group that only allows required ports
   • BA storage bucket with a restrictive access policy
   • CA virtual machine with the latest security patches applied
   • DA storage bucket that is publicly accessible
   Reveal Solution Discussion Select an answer first