Securing the Cloud CSCU Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company uses a cloud-based project management tool (SaaS). An employee's account was compromised because the employee reused a password from a personal account that was breached. The company wants to reduce the risk of this happening again. Which action is the most effective?

   • AProvide security awareness training on password hygiene
   • BUse a password manager to generate strong passwords
   • CRequire multi-factor authentication for all users
   • DMonitor the dark web for compromised credentials
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A healthcare organization is required to comply with HIPAA and is moving patient records to a cloud provider. The organization wants to ensure that the cloud provider's services meet the necessary security and privacy requirements. What should the organization do first?

   • ASign a business associate agreement (BAA) with the provider
   • BReview the cloud provider's compliance certifications and audit reports
   • CMove the data to a private cloud to avoid compliance issues
   • DEncrypt all patient records with a key managed by the organization
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which compliance standard is specifically designed to protect cardholder data and applies to organizations that handle credit card transactions?

   • AISO 27001
   • BHIPAA
   • CGDPR
   • DPCI DSS
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is choosing between IaaS and PaaS for a new application. The development team wants to focus on writing code and not manage servers, but the security team requires the ability to configure the operating system and install custom security agents. Which cloud service model best meets both needs?

   • APaaS, because it abstracts the OS and reduces management overhead
   • BOn-premises, because it offers the most control
   • CIaaS, because it provides virtual machines with full OS control
   • DSaaS, because it is fully managed and requires no configuration
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a recommended best practice for securing a cloud account?

   • AEnable multi-factor authentication (MFA) for all user accounts.
   • BUse the same strong password for all cloud accounts to simplify management.
   • CShare administrative credentials among team members for convenience.
   • DDisable security alerts to avoid unnecessary notifications.
   Reveal Solution Discussion Select an answer first