Securing the Cloud CSCU Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company is choosing between a PaaS and an IaaS solution for a new web application. The company has a small IT team and wants to minimize the effort required to manage the underlying infrastructure. Which solution is the most appropriate?

   • APaaS, because it provides more control over the operating system
   • BIaaS, because it is always more secure than PaaS
   • CIaaS, because it provides more control over the infrastructure
   • DPaaS, because it abstracts the underlying infrastructure and reduces management overhead
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which cloud data protection technique involves creating copies of data to ensure it can be restored in case of accidental deletion, corruption, or a ransomware attack?

   • AData masking
   • BEncryption
   • CAccess controls
   • DBackup
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which of the following is a common cloud security threat that involves an attacker exploiting a vulnerability in a cloud service's interface to gain unauthorized access or disrupt operations?

   • AInsecure APIs
   • BInsider threat
   • CMisconfiguration
   • DData breach
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   When using a personal device to access cloud services for work, which practice is a security best practice?

   • ADisable the device's lock screen to avoid delays.
   • BUse the same personal and work accounts on the device without separation.
   • CInstall security updates and use a screen lock on the device.
   • DConnect to public Wi-Fi without a VPN for faster access.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company's cloud storage bucket was accidentally made publicly readable, exposing sensitive files. The incident was traced to a misconfigured access control list. Which combination of actions should the company take to prevent this from recurring?

   • AEnable versioning on the bucket and set up lifecycle policies
   • BMove the bucket to a different region and enable cross-region replication
   • CReview and restrict bucket permissions, and enable automated configuration scanning
   • DDelete all files and recreate the bucket with a new name
   Reveal Solution Discussion Select an answer first