Securing the Cloud CSCU Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is moving its customer database to a cloud PaaS offering. The database contains sensitive personal information. The compliance team requires that data be encrypted at rest and that only authorized applications can access the data. Which two controls should the company implement?

   • AEnable encryption in transit and use a public endpoint with a strong password
   • BUse a shared database instance and rely on the cloud provider's default settings
   • CEnable encryption at rest and use a private network with access controls
   • DStore the database on-premises and use a VPN to access it
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company discovered that a cloud storage bucket was publicly readable due to a misconfigured ACL. The bucket contains sensitive customer data. The company wants to remediate the issue and prevent future misconfigurations. Which combination of actions is most effective?

   • ARemove public access, enable bucket versioning, and set up lifecycle policies
   • BMove the bucket to a new region and enable cross-region replication
   • CDelete the bucket and recreate it with a more restrictive name
   • DRemove public access and implement automated configuration scanning with alerts
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A company wants to use a cloud service where they only manage their data and applications, while the provider handles the underlying infrastructure, operating system, and middleware. Which cloud service model does this describe?

   • AFunction as a Service (FaaS)
   • BPlatform as a Service (PaaS)
   • CSoftware as a Service (SaaS)
   • DInfrastructure as a Service (IaaS)
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company's cloud environment was breached because an attacker used stolen API keys to access a cloud management API. The company wants to reduce the risk of similar attacks. Which combination of measures should be implemented?

   • AUse a single API key for all applications
   • BRotate API keys regularly and use short-lived credentials
   • CDisable logging for all API calls
   • DStore API keys in plain text in the application code
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In a cloud environment, which statement best describes the shared responsibility model?

   • AThe customer is responsible for all security controls, regardless of the service model.
   • BSecurity responsibilities are divided between the provider and the customer, depending on the service model and the specific asset.
   • CThe customer is responsible for securing the physical data center and network infrastructure.
   • DThe cloud provider is responsible for securing everything, including customer data and user access.
   Reveal Solution Discussion Select an answer first