Introduction to Cloud Security CCSE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is establishing a cloud security governance framework. The security team wants to ensure that all cloud deployments are compliant with the organization's security policies. The team is considering using a cloud security posture management (CSPM) tool. What is the PRIMARY benefit of using a CSPM tool?

   • AIt automatically remediates all security issues without human intervention.
   • BIt replaces the need for security policies and standards.
   • CIt continuously monitors cloud environments for misconfigurations and compliance violations.
   • DIt provides a single sign-on solution for cloud administrators.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which triad of principles is central to cloud security, ensuring that data is accessible only to authorized parties, remains unaltered, and is available when needed?

   • AAuthentication, authorization, and accounting (AAA)
   • BPrevention, detection, and response (PDR)
   • CPeople, process, and technology (PPT)
   • DConfidentiality, integrity, and availability (CIA)
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A retail company is adopting a cloud governance framework. The security team wants to ensure that all cloud resources are tagged with an owner and a cost center, and that any resource without proper tags is automatically terminated. Which governance control is the team implementing?

   • AA corrective control that fixes tagging after deployment
   • BA preventive control that enforces tagging standards
   • CA detective control that identifies untagged resources
   • DA deterrent control that discourages untagged resources
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company is moving a legacy application to a PaaS cloud environment. The security team must ensure that the application's data is protected and that the company meets its compliance obligations. Which responsibility is the company's under the shared responsibility model for PaaS?

   • AConfiguring the network firewalls for the platform's internal network.
   • BManaging the application code, data, and access management for users of the application.
   • CPatching the underlying operating system of the platform.
   • DSecuring the physical data center that hosts the platform.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is migrating to a SaaS application for customer relationship management (CRM). The security team is concerned about data confidentiality and compliance. Which of the following is the company's responsibility under the shared responsibility model for SaaS?

   • ASecuring the physical data center where the SaaS application is hosted.
   • BPatching the underlying application software.
   • CManaging user access and data classification within the SaaS application.
   • DConfiguring the network infrastructure that connects to the SaaS application.
   Reveal Solution Discussion Select an answer first