Cloud Computing Threats CEH Practice Questions (Page 9)

Questions 41–43

1. 41expert · hard

   A company is evaluating two cloud providers. Provider A offers a lower price but has experienced multiple data breaches. Provider B is more expensive but has a strong security track record. The company handles highly sensitive financial data. Which factor should be the primary consideration?

   • AThe provider's geographic location.
   • BThe cost savings from Provider A.
   • CThe provider's user interface and ease of use.
   • DThe provider's security posture and compliance certifications.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A cloud administrator accidentally deletes a production database. The company has backups, but the backups are stored in the same cloud account and are also deleted. What is the primary lesson from this incident?

   • AThe incident is an insider threat because the administrator had access.
   • BData loss can occur due to accidental deletion, and backups must be isolated and protected.
   • CEncryption would have prevented the deletion.
   • DCloud providers are responsible for data backups.
   Reveal Solution Discussion Select an answer first
3. 43application · medium

   A company exposes a REST API for its mobile app. The API uses API keys embedded in the app and does not validate input. An attacker discovers the API key and uses it to access other customers' data by manipulating request parameters. Which two weaknesses contributed to this incident?

   • AService outage and compliance failure.
   • BInsecure API design and lack of input validation.
   • CInsider threat and vendor lock-in.
   • DMisconfigured storage and weak encryption.
   Reveal Solution Discussion Select an answer first