Cloud Computing Threats and Countermeasures ECSS Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security analyst is investigating a potential account hijacking incident in a cloud environment. The analyst notices that a user account has been used to create new IAM roles and modify security groups. What is the most likely attack vector?

   • AThe attacker used stolen credentials from a phishing attack or credential stuffing.
   • BThe attacker performed a cross-tenant attack to gain access to the account.
   • CThe attacker used a metadata attack to retrieve temporary credentials.
   • DThe attacker exploited a vulnerability in the cloud provider's API.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security architect is designing a multi-tier application in a public cloud. The application consists of a web tier, an application tier, and a database tier. The architect needs to ensure that the database tier is not accessible from the internet, but the application tier must be able to connect to it. Additionally, the architect wants to minimize the attack surface. Which network design should be used?

   • APlace all tiers in the same public subnet and use security groups to restrict access to the database tier.
   • BPlace the web tier in a public subnet, and the application and database tiers in a private subnet, with security groups allowing only necessary traffic between tiers.
   • CPlace the web and application tiers in a public subnet, and the database tier in a private subnet, with a network ACL allowing all traffic from the application tier.
   • DPlace all tiers in a private subnet and use a VPN to allow external access to the web tier.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A developer accidentally exposed cloud API keys in a public code repository. An attacker uses these keys to access the cloud environment. Which of the following is the MOST effective immediate countermeasure?

   • ARotate the exposed API keys and revoke the compromised credentials.
   • BEnable multi-factor authentication on the developer's account.
   • CDelete the code repository.
   • DMonitor the cloud environment for unusual activity.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A multinational company must comply with GDPR and is using a public cloud provider. The company stores personal data of EU citizens in a specific region. What is the most important consideration to ensure GDPR compliance?

   • AImplement encryption for all personal data at rest and in transit.
   • BUse a private cloud to ensure that no data leaves the company's control.
   • CSign a data processing agreement with the cloud provider and ensure that data transfers outside the EU are protected by appropriate safeguards.
   • DEnsure that the cloud provider has data centers in the EU and that data is stored only in those regions.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which cloud attack vector involves an attacker exploiting the cloud instance metadata service to retrieve temporary credentials or other sensitive information?

   • ACredential theft
   • BCross-tenant attack
   • CMetadata attack
   • DInsecure interfaces
   Reveal Solution Discussion Select an answer first