Threats and Attacks in Cloud Environments CSE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following is an example of an insider threat from cloud provider personnel?

   • AA cloud provider administrator misusing their privileged access to view customer data
   • BAn external hacker exploiting a vulnerability in a cloud API
   • CA customer using a weak password for their cloud account
   • DA distributed denial-of-service attack targeting a cloud service
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company uses a cloud-based identity provider (IdP) for single sign-on (SSO). An attacker obtains a valid session token for a user by intercepting the token in transit. The attacker then uses the token to access the user's cloud resources. Which of the following is the most effective control to prevent this type of session hijacking?

   • AUse HTTPS for all communications between the user's browser and the IdP.
   • BBind the session token to the user's IP address and reject any requests from a different IP.
   • CImplement short-lived session tokens and require re-authentication for sensitive actions.
   • DUse a web application firewall (WAF) to block requests that contain a session token in the URL.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A cloud provider discovers a vulnerability in its virtualization platform that could allow a guest VM to read the memory of other VMs on the same host. The provider plans to patch the hypervisor, but the patch requires a host reboot. What is the most important consideration for the provider to maintain security while minimizing downtime?

   • ADisable the hypervisor feature that is vulnerable, even if it degrades performance.
   • BDelay the patch until the next maintenance window to avoid any disruption.
   • CNotify tenants and ask them to reboot their VMs themselves.
   • DApply the patch as soon as possible, using live migration to move VMs to patched hosts before rebooting.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which of the following is a classic example of a cloud misconfiguration leading to a security incident?

   • AA virtual machine with too much CPU
   • BA load balancer with a health check path
   • CAn S3 bucket set to public read access
   • DA database with a long backup retention period
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is a key characteristic of the evolving cloud threat landscape compared to traditional on-premises environments?

   • AAttackers can target a larger attack surface due to internet-exposed management interfaces and APIs
   • BTraditional network firewalls are sufficient to protect cloud workloads
   • CThreat actors are less motivated to attack cloud environments due to provider security
   • DCloud environments are inherently more secure because providers handle all security responsibilities
   Reveal Solution Discussion Select an answer first