Identifying Cloud Security Risks CSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of using a questionnaire to identify cloud risks?

   • AReviewing cloud provider security whitepapers
   • BAsking system administrators to list all cloud services currently in use
   • CRunning a vulnerability scanner against cloud resources
   • DConducting a penetration test on the cloud environment
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A risk analyst has identified a high-risk misconfiguration in a cloud database that contains sensitive customer data. The analyst must document this risk for the management team. What should the documentation include?

   • AThe exact command used to discover the misconfiguration
   • BA copy of the database logs
   • CThe names of the employees who discovered the issue
   • DA description of the risk, its likelihood, impact, and recommended remediation
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is designing a new cloud application that uses a public-facing API gateway, a set of microservices, and a managed database. The security architect wants to systematically identify attack vectors before deployment. Which approach best aligns with threat modeling for this cloud architecture?

   • AInterview the development team to ask about known security issues in the code
   • BRun a vulnerability scanner against the API gateway's public IP address
   • CReview the cloud provider's compliance certifications to ensure the architecture meets regulatory standards
   • DUse a data flow diagram to trace how data moves from the API gateway to the database and identify trust boundaries
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is typically included in a structured risk documentation entry?

   • AThe cloud provider's security certifications
   • BRisk description, likelihood, impact, and recommended controls
   • CThe exact cost of the risk in monetary terms
   • DThe name of the employee who discovered the risk
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of documenting identified cloud risks in a structured format?

   • ATo automatically remediate all identified risks
   • BTo replace the need for ongoing risk monitoring
   • CTo enable effective communication and analysis of risks by stakeholders
   • DTo satisfy all regulatory compliance requirements
   Reveal Solution Discussion Select an answer first