Platform and Infrastructure Security in Cloud CCSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of setting up alerts in a cloud monitoring system?

   • ATo automatically patch all virtual machines
   • BTo replace the need for manual log review
   • CTo notify administrators of potential security incidents or anomalies
   • DTo encrypt all data in transit
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a primary purpose of compliance frameworks in cloud computing?

   • ATo reduce the cost of cloud services
   • BTo replace the need for security controls
   • CTo increase the speed of cloud resource deployment
   • DTo provide a set of guidelines to help organizations meet regulatory and industry standards
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is moving its customer database to a cloud provider's managed database service. The security team is reviewing the shared responsibility model. Which security controls are the responsibility of the customer?

   • APatching the database software and managing the underlying operating system.
   • BManaging the physical security of the data center and network infrastructure.
   • CConfiguring access controls, encrypting data at rest, and managing user permissions.
   • DEnsuring the availability of the database service through redundant hardware.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is using a cloud provider's infrastructure-as-a-service (IaaS) offering to host virtual machines. The security team is reviewing the shared responsibility model. Which security control is the customer responsible for?

   • ANetwork infrastructure security, such as the hypervisor.
   • BPhysical security of the data center.
   • CPatching the guest operating system.
   • DData encryption at rest is the provider's responsibility.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security incident has been detected in a cloud environment. The incident response team needs to contain the threat, but the affected VM is part of a critical application that cannot be taken offline. The team also needs to preserve evidence for potential legal action. What is the best containment strategy?

   • AIsolate the VM by applying a security group that blocks all traffic, and take a snapshot for evidence.
   • BImmediately terminate the VM and restore from backup.
   • CDisconnect the VM from the network by removing its public IP, but leave it running.
   • DContinue monitoring the VM without taking action to gather more evidence.
   Reveal Solution Discussion Select an answer first