Threats and Attacks in Cloud Environments CSE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which type of insider threat is characterized by an employee who unintentionally exposes cloud credentials in a public code repository?

   • ACompromised insider
   • BNegligent insider
   • CThird-party insider
   • DMalicious insider
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is considering moving a legacy application to a public cloud. The application has a hard-coded dependency on a specific CPU instruction set that is not supported by the cloud provider's standard VM offerings. The company is concerned about the risk of side-channel attacks on shared hardware. Which of the following is the most appropriate solution?

   • AUse a dedicated host that provides the required CPU instruction set and ensures exclusive use of the physical server.
   • BUse a serverless function that runs on the provider's infrastructure.
   • CUse a container-based service that runs on shared infrastructure.
   • DUse a standard VM and rely on the cloud provider's hypervisor security patches.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A cloud provider is designing a new multi-tenant service. They want to minimize the risk of side-channel attacks between tenants while maintaining cost efficiency. Which architecture best achieves this?

   • AUse a public cloud provider's infrastructure without additional controls.
   • BAssign each tenant a dedicated physical server.
   • CUse container-based virtualization where all tenants share the same host kernel.
   • DUse hardware virtualization with strong isolation between VMs and ensure the hypervisor is regularly patched.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company's cloud environment is targeted by an attacker who is using a botnet to perform credential stuffing attacks against the company's cloud console. The attacker's motivation appears to be financial gain, as they are attempting to use compromised accounts to launch cryptocurrency miners. Which type of threat actor is most likely behind this attack?

   • AA financially motivated cybercriminal group using botnets to compromise accounts for resource hijacking.
   • BA nation-state actor seeking to steal intellectual property.
   • CA hacktivist group seeking to disrupt services for political reasons.
   • DAn insider threat who has access to the company's credentials.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A cloud administrator with extensive access privileges is laid off. The termination process is delayed, and the administrator's account remains active for three days. During that time, the former employee downloads a large volume of customer data from a cloud storage service. What is the primary risk demonstrated, and what control would have most effectively prevented this?

   • AInsider threat due to inadequate access revocation. Implement automated deprovisioning and conduct periodic access reviews.
   • BData breach due to insecure storage. Encrypt all data at rest and in transit.
   • CDenial of service caused by excessive downloads. Implement rate limiting on the storage service.
   • DExternal attacker using stolen credentials. Enable multi-factor authentication for all users.
   Reveal Solution Discussion Select an answer first