Enterprise Cloud Security CND Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which cloud security control is specifically designed to verify the identity of a user or system before granting access to cloud resources?

   • AAuditing
   • BEncryption
   • CAuthentication
   • DAuthorization
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A multinational corporation is considering a cloud provider for storing personal data of EU citizens. The provider offers data centers in multiple regions, but the company is concerned about compliance with GDPR. Which of the following actions is MOST important to ensure compliance?

   • AEncrypting all data with a customer-managed key
   • BSelecting a provider that stores data only in EU data centers
   • CUsing a private cloud deployment to avoid GDPR
   • DEnsuring the provider has appropriate legal mechanisms for data transfers
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is migrating a legacy application to the cloud. The application requires a specific operating system version and the security team needs to apply custom hardening scripts. Which service model provides the most control while minimizing management overhead?

   • ASaaS
   • BIaaS
   • CFaaS
   • DPaaS
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company is using a cloud provider's IaaS offering. They want to ensure that only authorized users can access the management console. Which of the following is the MOST effective control?

   • AEnabling multi-factor authentication (MFA) for all users
   • BRestricting access to the console by IP address
   • CEncrypting the console traffic with TLS
   • DUsing a strong password policy
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following is a recommended best practice for securing cloud infrastructure?

   • AUse the same strong password for all cloud accounts to simplify management
   • BEnable multi-factor authentication (MFA) for all user accounts, especially privileged ones
   • CDisable multi-factor authentication for administrative accounts to reduce friction
   • DGrant all users administrative privileges to avoid access issues
   Reveal Solution Discussion Select an answer first