Auditing and Monitoring Cloud Resources CSE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the main goal of continuous monitoring in cloud compliance?

   • ATo provide ongoing visibility into the security and compliance posture of cloud resources
   • BTo perform a one-time assessment of the cloud environment
   • CTo replace the need for periodic audits entirely
   • DTo automatically remediate all compliance issues without human intervention
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company must maintain continuous compliance with a framework that requires quarterly reviews of user access rights. The company has thousands of cloud users and roles. They want to automate the review process but also need to demonstrate that a human has approved each access decision. What is the best approach?

   • AFully automate the access review by having the tool automatically revoke any access that has not been used in 90 days, without human approval.
   • BUse an automated tool that generates a list of users and their access rights, flags anomalies, and routes the list to the appropriate managers for approval, with the approval recorded in the tool.
   • CUse a tool that automatically approves all access rights unless a manager explicitly rejects them within 48 hours.
   • DManually review all access rights each quarter using spreadsheets, and store the spreadsheets in a shared drive.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company receives an audit report with a finding that their cloud database is not encrypted at rest. The company is in the middle of a major product launch and cannot afford downtime. They need to remediate the finding without disrupting the database service. What is the best approach?

   • ADocument the finding as accepted risk and defer remediation until after the product launch.
   • BTake the database offline, export the data, re-import it into a new encrypted database, and then update the application connection string.
   • CEncrypt the application data before it is sent to the database, but leave the database itself unencrypted.
   • DEnable encryption at rest using the cloud provider's transparent data encryption feature, which encrypts the database without requiring application changes or downtime.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of cloud auditing in the context of compliance and governance?

   • ATo provide independent evaluation of cloud controls and processes against defined criteria
   • BTo replace the need for continuous monitoring by performing periodic checks
   • CTo automatically remediate all security misconfigurations in cloud resources
   • DTo ensure that cloud resources are always available and never experience downtime
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company has implemented automated monitoring that flags non-compliant cloud resources. The compliance team wants to ensure that identified issues are actually fixed and do not recur. What should they add to their process?

   • AA policy that requires all findings to be accepted as residual risk without further action.
   • BA monthly report that lists all findings and is sent to management without any follow-up actions.
   • CA process that disables monitoring for resources that repeatedly generate findings.
   • DA remediation workflow that automatically or manually applies fixes, tracks the status of each finding, and re-evaluates the resource after the fix.
   Reveal Solution Discussion Select an answer first