Cloud Computing Threats and Countermeasures ECSS Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the first step in a typical cloud incident response process?

   • AEradication
   • BDetection and identification
   • CRecovery
   • DContainment
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company detects that a cloud storage bucket was accessed by an unauthorized external IP address. The bucket contains sensitive customer data. Which step should be taken FIRST in the incident response process?

   • ARestore the bucket from a backup.
   • BNotify all affected customers immediately.
   • CImmediately delete the bucket to prevent further access.
   • DRevoke the bucket's public access and preserve logs for forensic analysis.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which cloud-specific threat involves an attacker using stolen credentials to gain unauthorized access to a cloud account, potentially leading to data theft or service disruption?

   • AData breach
   • BInsecure APIs
   • CAccount hijacking
   • DInsider threat
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company detects that an attacker has compromised an IAM user account and is launching unauthorized virtual machines in their AWS environment. The security team needs to respond quickly to stop the attack and preserve evidence. Which sequence of actions should they take?

   • AContact the cloud provider and ask them to shut down the entire account.
   • BImmediately delete the compromised IAM user and terminate all running instances.
   • CChange the password of the compromised IAM user and continue monitoring.
   • DDisable the IAM user, revoke temporary credentials, and snapshot the running instances for forensic analysis.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company uses a public cloud and wants to protect its web application from DDoS attacks. Which control is MOST appropriate?

   • AUse a cloud-based DDoS protection service (e.g., AWS Shield, Azure DDoS Protection).
   • BEncrypt all data in transit using TLS.
   • CConfigure a network security group to block all inbound traffic.
   • DImplement multi-factor authentication for all users.
   Reveal Solution Discussion Select an answer first