Threats and Attacks in Cloud Environments CSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which vulnerability is commonly found in cloud APIs and can lead to unauthorized access?

   • AInsufficient network bandwidth
   • BBroken object-level authorization
   • CLack of data encryption at rest
   • DExcessive physical security
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which attack technique involves using previously stolen username and password pairs to gain access to cloud accounts?

   • ASession hijacking
   • BCredential stuffing
   • CSQL injection
   • DPhishing
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company stores backup files in a cloud storage service. The backups are encrypted with a customer-managed key. The key is stored in the same cloud account as the backups, and the backup storage bucket is publicly readable due to a misconfiguration. An attacker discovers the bucket and downloads the encrypted backups. The attacker also finds the decryption key in a misconfigured secrets manager. What is the most likely outcome?

   • ANo impact because the backups are encrypted.
   • BDenial of service: the attacker encrypts the backups with a new key.
   • CData loss: the attacker deletes the backups, causing permanent loss.
   • DData breach: the attacker can decrypt and access the backup data.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Why is mitigating DDoS attacks in cloud environments uniquely challenging compared to on-premises?

   • ADDoS attacks only affect on-premises infrastructure
   • BCloud providers do not offer any DDoS protection services
   • CCloud services are often internet-facing and can be targeted from anywhere, while also sharing infrastructure that may be affected
   • DCloud environments do not have enough bandwidth to absorb DDoS traffic
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which risk is associated with inadequate isolation between tenants in a multi-tenant cloud?

   • AOne tenant could potentially access another tenant's data or resources
   • BThe cloud provider cannot scale resources
   • CThe cloud provider loses its physical data center
   • DTenants cannot use the internet
   Reveal Solution Discussion Select an answer first