Threats and Attacks in Cloud Environments CSE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   How might an attacker exploit an insecure cloud API?

   • ABy sending crafted requests to bypass authentication or access unauthorized resources
   • BBy changing the API documentation
   • CBy physically stealing the API server hardware
   • DBy overwhelming the API with traffic to increase its performance
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is a common cause of data breaches in cloud environments?

   • AInadequate access controls
   • BExcessive physical security at data centers
   • CInsufficient network bandwidth
   • DLack of encryption in transit
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company's cloud environment is targeted by an attacker who uses a list of usernames and passwords obtained from a previous breach of another website. The attacker attempts these credentials against the company's cloud SSO portal. What is the primary attack technique being used, and what is the most effective mitigation?

   • ACredential stuffing. Enforce multi-factor authentication and use breached-password detection.
   • BDenial of service. Increase the SSO portal's capacity.
   • CSession hijacking. Implement session timeout and re-authentication.
   • DPhishing. Train users to recognize suspicious emails.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which attack type is considered cloud-specific because it exploits the shared, multi-tenant nature of cloud infrastructure?

   • AMan-in-the-middle attack
   • BSQL injection
   • CSide-channel attack
   • DPhishing
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which scenario best illustrates a data loss incident in a cloud environment?

   • AAn attacker exfiltrates customer data from a misconfigured storage bucket
   • BA DDoS attack makes a website unavailable for several hours
   • CAn administrator accidentally deletes a production database without a backup
   • DA phishing email tricks a user into revealing their password
   Reveal Solution Discussion Select an answer first