Shared Cloud Security Responsibility CSE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company uses a SaaS CRM platform. The company's security team discovers that a former employee's account is still active. The team wants to ensure that former employees cannot access the CRM. Which action is the company's responsibility?

   • AEnsuring the CRM's data center is physically secure
   • BPatching the CRM's authentication service
   • CConfiguring the CRM's network firewall
   • DDeactivating the user account in the CRM's identity management console
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company uses a SaaS file-sharing service to store confidential documents. The company's security policy requires that documents be encrypted with customer-managed keys. The SaaS service supports customer-managed keys. Which action is the company's responsibility?

   • AManaging the physical security of the key management hardware
   • BConfiguring the service to use the customer-managed key
   • CPatching the file-sharing service's encryption software
   • DEnsuring the service's data center is compliant with industry standards
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is using a cloud provider's SaaS offering for email. The provider manages the infrastructure and application. Which security responsibility belongs to the customer?

   • ASecuring the email servers.
   • BPatching the email application.
   • CManaging user accounts and passwords.
   • DEnsuring the physical security of the data center.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company uses a cloud provider's object storage service to store sensitive documents. The documents are encrypted by the provider at rest. The company wants to ensure that only authorized users can access the documents. Which responsibility does the company retain under the shared responsibility model?

   • AManaging the encryption keys used for server-side encryption
   • BConfiguring access policies and permissions for the documents
   • CEnsuring the physical security of the storage servers
   • DPatching the storage service's underlying software
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is using a SaaS application for project management. The application stores sensitive project data. The company's security team wants to ensure that data is encrypted both in transit and at rest. Which action is the customer's responsibility?

   • AManaging the encryption keys for the provider's infrastructure.
   • BImplementing encryption at the database level.
   • CEnsuring the physical security of the servers where data is stored.
   • DConfiguring the application's encryption settings if the provider offers them.
   Reveal Solution Discussion Select an answer first