Introduction to Cloud Security CCSE Practice Questions (Page 5)

Questions 21–25

1. 21application · easy

   An e-commerce company runs its website on virtual machines in a public cloud. A recent outage occurred because a single availability zone failed, making the site unavailable. To improve availability, the company decides to deploy the application across multiple availability zones and use a load balancer. Which cloud security principle is the company primarily addressing?

   • AAvailability
   • BConfidentiality
   • CIntegrity
   • DNon-repudiation
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is defining its cloud security governance framework. The security team wants to ensure that all cloud deployments meet the organization's security requirements. Which of the following is the MOST effective governance control?

   • AProvide security training to all cloud administrators.
   • BRely on the cloud provider's default security configurations.
   • CImplement automated policy enforcement using Infrastructure as Code (IaC) templates that include security controls.
   • DConduct annual security reviews of cloud deployments.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company is using a public cloud SaaS application for email. The security team is concerned about data leakage and compliance with data protection regulations. Which of the following is the company's responsibility under the shared responsibility model for SaaS?

   • AManaging the underlying network infrastructure of the SaaS application.
   • BSecuring the physical data center where the email service is hosted.
   • CConfiguring data loss prevention (DLP) policies within the SaaS application.
   • DPatching the email server software.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is an example of a compliance framework that organizations may use to guide cloud security governance?

   • AREST API
   • BTCP/IP
   • CISO/IEC 27001
   • DTLS 1.3
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A government contractor must comply with FedRAMP requirements for its cloud environment. The security team is mapping existing security controls to the FedRAMP control catalog. Which activity is essential to demonstrate compliance?

   • APurchasing cyber insurance to cover potential breaches
   • BPerforming a penetration test once a year
   • CDocumenting control implementation and providing evidence for each required control
   • DUsing only private cloud infrastructure to avoid third-party risks
   Reveal Solution Discussion Select an answer first