Cloud Attack Countermeasures EHE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of implementing cloud attack countermeasures?

   • ATo transfer all security responsibility to the cloud provider
   • BTo ensure compliance with all international regulations
   • CTo reduce the likelihood and impact of cloud-specific attacks
   • DTo eliminate all security risks in the cloud environment
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's cloud environment has a public-facing web server and a backend database. The security team wants to prevent the database from being accessed from the internet while still allowing the web server to query it. Which countermeasure is best?

   • AEnable detailed logging on the database to detect unauthorized access attempts.
   • BEncrypt the database and require a password for all connections.
   • CAssign the database a public IP address and rely on a firewall rule to block external traffic.
   • DPlace the database in a private subnet and configure a security group that only allows traffic from the web server's security group on the database port.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company's cloud environment was breached because a developer reused a personal password for a privileged service account. The security team wants to prevent this class of issue going forward. Which combination of countermeasures best addresses the root cause?

   • ARestrict network access to the cloud management console using security groups and IP allowlists.
   • BEnforce multi-factor authentication for all privileged accounts and implement a password manager with generated unique passwords.
   • CDeploy a web application firewall in front of all cloud services and enable logging of authentication events.
   • DRequire users to change passwords every 30 days and disable accounts after three failed login attempts.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company processes credit card payments and must protect cardholder data. They are using a third-party payment processor. Which data protection countermeasure is most appropriate for the data they store?

   • APlace the database in a private subnet
   • BEncrypt the data in transit using TLS
   • CApply a compliance policy that requires annual audits
   • DTokenize the cardholder data before storing it
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of compliance and governance countermeasures in a cloud environment?

   • ATo ensure the cloud environment meets regulatory standards and internal policies
   • BTo reduce the cost of cloud services
   • CTo automatically block all cyber attacks
   • DTo improve the performance of cloud applications
   Reveal Solution Discussion Select an answer first