Threats and Attacks in Cloud Environments CSE Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A company is concerned about the risk of a negligent insider accidentally exposing sensitive data in a cloud storage bucket. The company wants to implement a control that reduces the likelihood of this happening without hindering productivity. Which control is most appropriate?

   • AUse a cloud security posture management (CSPM) tool that automatically remediates public storage buckets by applying a private ACL.
   • BImplement a data loss prevention (DLP) solution that monitors for sensitive data in storage buckets and alerts when it is publicly accessible.
   • CDisable the ability for employees to create new storage buckets and require all buckets to be created by the security team.
   • DProvide annual security awareness training to all employees.
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A company has a multi-cloud environment (AWS and Azure). The security team wants to implement a unified approach to detect and respond to threats across both clouds. Which of the following is the most effective strategy?

   • AUse a cloud-native security tool from one provider and apply it to both clouds.
   • BUse separate security tools for each cloud provider and manually correlate alerts.
   • CUse a third-party cloud security platform that integrates with both AWS and Azure, providing centralized visibility and automated response.
   • DImplement a security information and event management (SIEM) system that collects logs from both clouds and requires manual analysis.
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which of the following is a general mitigation approach for cloud threats?

   • AAvoiding the use of encryption to reduce complexity
   • BDisabling all security controls to improve performance
   • CImplementing continuous monitoring and logging
   • DRelying solely on the cloud provider for all security
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A company runs a customer-facing web application on a cloud provider. An attacker launches a DDoS attack that floods the application's public IP address with UDP traffic. The company's on-premises firewall is not capable of handling the volume. Which mitigation approach should the company implement to maintain availability?

   • AIncrease the size of the virtual machines (VMs) behind the load balancer to handle the traffic.
   • BConfigure the network security group (NSG) to block all UDP traffic from the internet.
   • CUse a cloud-based DDoS protection service that scrubs traffic before it reaches the application, and configure rate-based rules on the web application firewall (WAF).
   • DChange the public IP address of the application and use a DNS-based failover to a different region.
   Reveal Solution Discussion Select an answer first
6. 50expert · hard

   A healthcare company uses a cloud EHR system. A contractor with legitimate access to patient records accidentally emails a spreadsheet containing unencrypted patient data to the wrong external recipient. The company's incident response team is deciding how to respond. Which approach best balances legal obligations, risk, and operational impact?

   • ADisable the contractor's access and terminate the contract immediately.
   • BOnly retrain the contractor and take no further action.
   • CTreat it as a data breach: notify the affected patients and regulatory authorities as required, and implement technical controls to prevent recurrence.
   • DIgnore the incident because the contractor had legitimate access and the data was not stolen by an external attacker.
   Reveal Solution Discussion Select an answer first