Platform and Infrastructure Security in Cloud CCSE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is moving a legacy application to a cloud IaaS environment. They are concerned about security responsibilities. Which of the following is the customer's responsibility under the shared responsibility model?

   • ASecuring the physical data center that hosts the virtual machines.
   • BPatching the operating system of the virtual machines.
   • CManaging the network infrastructure that connects the data centers.
   • DMaintaining the hypervisor that runs the virtual machines.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A financial services company must store customer data in a specific geographic region to comply with data residency regulations. They are evaluating a public cloud provider. Which of the following is the most important consideration?

   • AThe company uses a private cloud model instead of a public cloud.
   • BThe cloud provider offers a region in the required country and the company configures data storage to use that region.
   • CThe cloud provider uses dedicated physical servers for the company's workloads.
   • DThe cloud provider encrypts all data at rest and in transit.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In the shared responsibility model for cloud platforms, which of the following is typically the responsibility of the cloud customer?

   • AReplacing failed physical hard drives in the cloud provider's storage arrays
   • BManaging identity and access for users within their own cloud account
   • CPatching the hypervisor that hosts virtual machines
   • DPhysical security of data center facilities
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which cloud infrastructure component is primarily responsible for controlling inbound and outbound traffic to virtual machines?

   • ANetwork security groups (NSGs) or security groups
   • BVirtual network interface cards (vNICs)
   • CHypervisor
   • DStorage volumes
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is setting up a new cloud environment and wants to enforce a baseline configuration for all virtual machines. They want to ensure that VMs are not publicly accessible and that they have the latest security patches. Which combination of controls should they implement?

   • AUse a central security policy that denies public IP addresses and requires patch compliance, and apply it to all VM deployments.
   • BCreate a custom VM image with patches baked in and rely on developers to use it.
   • CPlace all VMs in a private subnet and use a jump host for administrative access.
   • DEnable network security groups that only allow SSH from the company's IP range.
   Reveal Solution Discussion Select an answer first