Shared Cloud Security Responsibility CSE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company migrates its customer database to a cloud provider using an IaaS virtual machine. The VM is configured with a public IP address and a network security group that allows inbound RDP from the internet. The database contains sensitive customer records. Which security responsibility falls on the company rather than the cloud provider?

   • AEnsuring the underlying storage hardware is fault-tolerant
   • BPatching the hypervisor that hosts the VM
   • CManaging the physical security of the data center where the VM runs
   • DConfiguring the network security group to restrict RDP access
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is using a cloud provider's IaaS offering. They have deployed a virtual machine and are responsible for securing the operating system. Which of the following is the cloud provider's responsibility?

   • AManaging user access to the virtual machine.
   • BPhysical security of the data center.
   • CConfiguring the firewall rules within the virtual machine.
   • DPatching the guest operating system of the virtual machine.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A financial services company is migrating a customer-facing application to the cloud. They are evaluating IaaS, PaaS, and SaaS options. The compliance team requires that the company can audit all security configurations and have visibility into the underlying infrastructure. Which service model best meets this requirement?

   • AAny model, because the shared responsibility model is identical for all.
   • BSaaS, because the provider handles all security and compliance.
   • CIaaS, because it provides the most control over the infrastructure and configuration.
   • DPaaS, because the provider manages the platform and the customer only manages the application.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is typically a responsibility of the cloud service provider under the shared responsibility model?

   • ASecuring the physical data center and hardware
   • BEncrypting customer data stored in the cloud
   • CManaging user access to cloud applications
   • DConfiguring network firewalls for customer workloads
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A startup is deploying a web application on AWS. They plan to use Amazon EC2 for the application server and Amazon RDS for the database. The security team is defining who is responsible for patching the operating system of the EC2 instances and who is responsible for patching the database engine. According to the shared responsibility model, which statement correctly describes their responsibilities?

   • AThe startup patches the EC2 OS, and AWS patches the RDS database engine.
   • BBoth the EC2 OS and the RDS database engine are patched by the startup.
   • CAWS patches the EC2 OS, and the startup patches the RDS database engine.
   • DAWS patches the EC2 OS and the RDS database engine; the startup patches nothing.
   Reveal Solution Discussion Select an answer first