Cloud Attack Countermeasures EHE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company's cloud environment was compromised, and the security team only discovered the breach after a customer reported a data leak. Which monitoring countermeasure would have most likely detected the breach earlier?

   • APerforming quarterly vulnerability scans
   • BEnabling multi-factor authentication on all user accounts
   • CImplementing a backup strategy with daily snapshots
   • DConfiguring real-time alerts for unusual data egress patterns
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company's cloud environment was breached because a developer's access key was exposed in a public code repository. The developer had broad permissions to multiple services. The security team wants to reduce the impact of similar incidents. Which combination of countermeasures is most effective?

   • AUse short-lived credentials and enforce least privilege for all roles
   • BRotate access keys every 90 days and enable multi-factor authentication
   • CEncrypt all data at rest and in transit
   • DMonitor for unusual activity and alert on new API calls
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which activity is a key component of governance in a cloud environment?

   • ADefining and enforcing security policies
   • BConducting penetration tests
   • CDeploying a web application firewall
   • DEncrypting all data at rest
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company's cloud web application was compromised through a cross-site scripting (XSS) vulnerability. The development team is planning to fix the code, but the security team needs immediate protection while the fix is developed. Which countermeasure provides the most immediate mitigation?

   • AEnable detailed logging on the application server
   • BDeploy a web application firewall (WAF) with rules to block XSS payloads
   • CDisable JavaScript in the users' browsers
   • DPlace the application in a private subnet
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company's cloud environment was hit by a ransomware attack. The company has backups, but restoring them would lose several hours of recent transactions. The company needs to minimize data loss and downtime. Which countermeasure best balances these needs?

   • AUse point-in-time recovery for the database and test the restore process regularly
   • BEnable multi-factor authentication on all accounts
   • CEncrypt all data at rest
   • DTake daily backups and store them in a separate region
   Reveal Solution Discussion Select an answer first