Platform and Infrastructure Security in Cloud CCSE Practice Questions (Page 11)

Questions 51–53

1. 51application · medium

   A security engineer is implementing workload protection for a fleet of virtual machines. The team needs to detect known vulnerabilities in the operating system and applications, and also detect runtime threats such as unusual process execution. Which solution should be used?

   • AConfigure operating system audit logs and review them monthly.
   • BDeploy a vulnerability scanner that runs weekly and generates a report.
   • CEnable a cloud workload protection platform (CWPP) that includes vulnerability management and runtime monitoring.
   • DUse a network intrusion detection system (IDS) to monitor traffic to and from the VMs.
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   Which IAM component defines a set of permissions that can be attached to users, groups, or services?

   • AAccess key
   • BPolicy
   • CPassword
   • DRegion
   Reveal Solution Discussion Select an answer first
3. 53foundation · easy

   What is the primary purpose of an IAM role?

   • ATo replace the need for multi-factor authentication
   • BTo encrypt data stored in cloud storage
   • CTo provide temporary credentials for a trusted entity to access cloud resources
   • DTo store long-term access keys for applications
   Reveal Solution Discussion Select an answer first