Identifying Cloud Security Risks CSE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security architect is threat modeling a multi-tier cloud application that includes a web front end, an application server, and a database. The architect has limited time and budget. The team has already identified a critical vulnerability in the web front end. The architect must decide how to allocate remaining resources to identify other attack vectors. Which approach best balances thoroughness and resource constraints?

   • AConduct a full threat modeling exercise on all components, including data flows and trust boundaries
   • BDefer threat modeling and rely on the vulnerability scan results
   • CPrioritize threat modeling on the application server and database, as they hold sensitive data
   • DFocus only on the web front end because it is the most exposed component
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of threat modeling in a cloud architecture?

   • ATo ensure compliance with all regulatory requirements
   • BTo replace the need for vulnerability scanning in the cloud
   • CTo systematically identify potential attack vectors and vulnerabilities in the design
   • DTo automatically patch all identified vulnerabilities in the cloud environment
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A security team is conducting a vulnerability assessment of a cloud environment that includes a managed Kubernetes cluster and a set of serverless functions. The team has limited time and must decide whether to use a cloud-native security tool or a traditional vulnerability scanner. The traditional scanner is already licensed and the team is familiar with it. What should the team do?

   • AUse only the cloud-native tool and ignore the VMs
   • BUse the cloud-native tool for the Kubernetes cluster and serverless functions, and use the traditional scanner for any VMs
   • CSkip the vulnerability assessment because the environment is managed
   • DUse only the traditional scanner because it is already licensed
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is an external source of cloud security risk?

   • AA supply chain attack through a third-party library used in the application
   • BA misconfigured storage bucket that exposes data
   • CAn insider threat from a disgruntled employee
   • DAn employee accidentally sharing a sensitive file publicly
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A cloud architect is threat modeling a web application that uses a load balancer, application servers, and a database. The architect wants to identify potential attack vectors that could lead to data exfiltration. Which threat modeling step is most critical for this goal?

   • AReview the cloud provider's security whitepapers
   • BIdentify trust boundaries between the load balancer, application servers, and database
   • CList all the software versions used in the application servers
   • DInterview the database administrator about backup procedures
   Reveal Solution Discussion Select an answer first