A cloud configuration assessment is being performed on an Azure subscription. Which action is part of this assessment?

Reviewing resource configurations against security baselines

Deploying new virtual machines to test performance

Reviewing user login logs for brute-force attempts

Analyzing network traffic for malicious activity

A security team is reviewing a cloud environment and finds that a storage bucket contains sensitive customer data, but the bucket is not encrypted. The bucket is also publicly accessible. Which high-risk practice is present?

Inadequate network segmentation

Which of the following is an example of a high-risk practice in a cloud environment?

Encrypting data in transit using TLS

Segmenting the network into separate subnets

Using multi-factor authentication for all user accounts

Granting a user full administrator access to all resources

A cloud application uses default administrator credentials for its database. What type of issue does this represent?

An indicator of misconfiguration (IOM)

CrowdStrikeCertified Cloud Specialist (CCCS)

Domain 6Objective 1

6.1 Evaluate Cloud Security Controls and Configurations to Identify Indicators of Misconfiguration (IOMs), Vulnerabilities And/or High-Risk Practices CCCS Practice Questions (Page 2)

Part of the Findings and Detection Analysis domain, which makes up ~22% of our current practice bank.

25questions here

5free pages

6concepts

Questions 6–10

6foundation · easy
A security analyst is reviewing the controls in a cloud environment. Which type of control is designed to stop a security incident from occurring in the first place?
Select an answer first
7foundation · easy
A cloud configuration assessment is being performed on an Azure subscription. Which action is part of this assessment?
Select an answer first
8application · medium
A security team is reviewing a cloud environment and finds that a storage bucket contains sensitive customer data, but the bucket is not encrypted. The bucket is also publicly accessible. Which high-risk practice is present?
Select an answer first
9foundation · easy
Which of the following is an example of a high-risk practice in a cloud environment?
Select an answer first
10foundation · easy
A cloud application uses default administrator credentials for its database. What type of issue does this represent?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CrowdStrike. “CCCS” is a trademark of its owner, used for identification only.