Cloud Computing Threats CEH Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A multinational company must comply with data residency laws that require customer data to remain in specific countries. The company is considering a hybrid cloud model. Which factor is most critical to evaluate?

   • AThe cost of the hybrid cloud solution.
   • BThe cloud provider's ability to restrict data replication to approved regions.
   • CThe performance of the on-premises and cloud connection.
   • DThe provider's customer support response time.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company uses a cloud-based application that stores customer data. They have implemented encryption, access controls, and monitoring. However, a recent audit found that some employees have excessive permissions. Which additional control would best mitigate the risk of insider threats?

   • AImplement regular access reviews and least privilege
   • BEnable multi-factor authentication for all users
   • CDeploy additional network firewalls
   • DIncrease the frequency of data backups
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company stores customer data in an Amazon S3 bucket. A security audit reveals the bucket policy allows 's3:GetObject' for 'Principal: *'. The company wants to reduce the risk of unauthorized access while maintaining the ability to serve public content from a separate bucket. Which action should the security team take first?

   • AMove the customer data to a different AWS account and replicate the public content to the original bucket.
   • BEnable S3 server-side encryption with AWS KMS and rotate the KMS key monthly.
   • CChange the bucket policy to require Multi-Factor Authentication (MFA) for all GetObject requests.
   • DEnable S3 Block Public Access on the bucket and create a CloudFront distribution for the public content.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company runs a hybrid cloud environment with critical workloads on-premises and development workloads in a public cloud. The public cloud provider announces a major service outage that also affects their management console. The company's on-premises systems are unaffected. Which threat is most directly demonstrated?

   • AVendor lock-in due to proprietary APIs
   • BCompliance failure due to data residency
   • CService outage from the cloud provider
   • DInsider threat from the provider's staff
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company uses a cloud object storage service for backups. The backups contain sensitive data. The security team discovers that the storage bucket is publicly readable. The company also has a requirement to retain backups for 7 years. Which combination of actions is most appropriate?

   • ARemove public access, enable encryption, and apply an immutability policy to prevent deletion or modification.
   • BEnable encryption and move the backups to a different region.
   • CCreate a new bucket with private access and copy the backups there.
   • DRemove public access and enable versioning.
   Reveal Solution Discussion Select an answer first