Cloud Concepts and Container Technology CEH Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following best describes the shared responsibility model in cloud computing?

   • ASecurity responsibilities are split: the provider secures the infrastructure, and the customer secures data, identities, and access.
   • BThe customer is responsible for all security aspects, including physical security of data centers.
   • CSecurity responsibilities are determined solely by the customer's on-premises security policies.
   • DThe cloud provider is responsible for all security aspects, including customer data and access management.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A company wants to use a cloud service to host a web application without managing the underlying servers or runtime environment. They only want to focus on writing code and deploying the application. Which service model best fits this need?

   • ASoftware as a Service (SaaS)
   • BPlatform as a Service (PaaS)
   • CInfrastructure as a Service (IaaS)
   • DData as a Service (DaaS)
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has a containerized application that must be highly available. They want to ensure that if a node in the cluster fails, the containers are automatically rescheduled to healthy nodes. Which Kubernetes feature provides this?

   • AReplicaSet
   • BDeployment
   • CService
   • DConfigMap
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security team is hardening a Kubernetes cluster. They want to limit what containers can do at the kernel level. They are considering using Pod Security Policies (PSP) or OPA/Gatekeeper. What is a key consideration?

   • APSP is still the recommended approach
   • BSecurity policies are not needed if containers run as non-root
   • COPA/Gatekeeper is the only way to enforce security policies
   • DPSP is deprecated and should be replaced with OPA/Gatekeeper or Pod Security Admission
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A startup wants to deploy a customer-facing web application with minimal infrastructure management. They expect unpredictable traffic spikes and want to avoid provisioning servers. The team also needs to comply with data residency requirements that mandate all customer data remain in a specific country. Which combination of cloud service and deployment model best meets these needs?

   • APaaS on a public cloud with a region located in the required country
   • BPaaS on a community cloud shared with other startups in the required country
   • CSaaS on a public cloud with a region located in the required country
   • DIaaS on a private cloud hosted in the required country
   Reveal Solution Discussion Select an answer first