Cloud Computing Threats and Countermeasures ECSS Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company's cloud environment has been compromised. The incident response team needs to determine the scope of the breach and identify which resources were accessed. The team has access to the cloud provider's logging and monitoring tools. Which approach is most effective?

   • AUse a vulnerability scanner to identify weaknesses in the environment.
   • BImmediately shut down all cloud resources to prevent further damage.
   • CContact law enforcement before gathering any evidence.
   • DReview the cloud provider's access logs and correlate them with the company's own application logs.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which compliance framework is specifically designed to protect the privacy and personal data of individuals within the European Union?

   • AISO 27001
   • BPCI DSS
   • CGDPR
   • DHIPAA
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company is using a public cloud provider and has implemented a shared responsibility model. The security team is responsible for securing their applications and data. Which of the following is the customer's responsibility?

   • AEnsuring physical security of the data centers.
   • BConfiguring security groups and network ACLs.
   • CManaging the underlying storage infrastructure.
   • DPatching the hypervisor that runs the virtual machines.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A company experiences a ransomware attack that encrypts files stored in a public cloud storage bucket. The company has versioning enabled on the bucket. What is the most effective recovery strategy?

   • ARestore the bucket to a previous version using the cloud provider's versioning feature.
   • BUse a data recovery service to recover the encrypted files.
   • CContact the attacker and pay the ransom to obtain the decryption key.
   • DDelete all encrypted files and recreate them from backups.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company's cloud environment is compromised. The incident response team needs to preserve evidence for potential legal action. Which of the following is the MOST important consideration for cloud forensic evidence?

   • AEnsure the chain of custody is documented for all collected evidence.
   • BRestore the affected systems from backup before collecting evidence.
   • CUse the cloud provider's built-in logging tools to collect evidence.
   • DCollect evidence as quickly as possible, even if it means disrupting production services.
   Reveal Solution Discussion Select an answer first