Cloud Computing Threats and Countermeasures ECSS Practice Questions (Page 9)

Questions 41–43

1. 41expert · hard

   A security team is evaluating the risk of shared technology vulnerabilities in a public cloud IaaS environment. Which of the following is the MOST effective countermeasure?

   • AUse a private cloud deployment model to ensure dedicated physical hardware.
   • BImplement strong network segmentation and use security groups to limit lateral movement.
   • CEncrypt all data at rest and in transit.
   • DRegularly patch the guest operating system and applications.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A company uses a public cloud environment and wants to ensure that only specific employees can access a sensitive database. They also want to enforce least privilege. Which control is MOST effective?

   • AEnable database auditing and monitoring.
   • BPlace the database in a private subnet and use a network security group to restrict access to a specific IP range.
   • CEncrypt the database with a customer-managed key.
   • DUse identity and access management (IAM) roles with granular permissions and require multi-factor authentication.
   Reveal Solution Discussion Select an answer first
3. 43application · medium

   A multinational company operates in multiple regions and must comply with data residency requirements. They use a public cloud provider with data centers in several countries. Which governance policy is MOST important to implement?

   • AImplement a data loss prevention (DLP) solution.
   • BConduct regular penetration testing of cloud infrastructure.
   • CDefine a data residency policy that restricts data storage to approved geographic regions.
   • DRequire all employees to use VPN when accessing cloud resources.
   Reveal Solution Discussion Select an answer first