Platform and Infrastructure Security in Cloud CCSE Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which network security control provides a logically isolated section of the cloud network where you can launch resources?

   • AInternet gateway
   • BDNS resolver
   • CLoad balancer
   • DVirtual Private Cloud (VPC)
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A development team uses infrastructure-as-code to deploy cloud resources. They want to automatically scan their infrastructure templates for misconfigurations before deployment. Which approach should they integrate into their CI/CD pipeline?

   • ADeploy the resources to a test environment and then run a vulnerability scanner against the running infrastructure.
   • BEnable logging and monitoring on the deployed resources to detect misconfigurations after they occur.
   • CManually review the templates in a peer review process before merging.
   • DRun a static analysis tool that checks the template for security best practices and fails the build if critical issues are found.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the purpose of a cloud governance policy?

   • ATo provide a user interface for managing cloud resources
   • BTo encrypt all data stored in the cloud
   • CTo define rules and procedures for managing cloud resources to ensure security and compliance
   • DTo automatically scale cloud resources based on demand
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   During a security incident, a cloud engineer suspects that a virtual machine has been compromised. The incident response plan requires preserving forensic evidence while minimizing downtime. The VM is running a critical application that cannot be stopped for more than a few minutes. What is the best course of action?

   • ACopy the VM's memory to a file and then continue normal operations.
   • BDelete the VM and restore from the last known good backup.
   • CTake a snapshot of the VM's disk while it is running, then isolate the VM by removing it from the network.
   • DImmediately shut down the VM and take a snapshot for forensic analysis.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which security control is essential for container images to prevent vulnerabilities from being introduced into production?

   • AScanning container images for vulnerabilities before deployment
   • BRunning containers as the root user
   • CUsing the latest version of the container runtime
   • DDisabling container logs
   Reveal Solution Discussion Select an answer first