Cloud Attack Countermeasures EHE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A healthcare organization stores patient records in a cloud object storage bucket. They must ensure that even if the storage credentials are compromised, the data remains unreadable. Which measure is most effective?

   • AEnable versioning and lifecycle rules to retain old versions of objects.
   • BSet up a VPC endpoint for the bucket and disable public access.
   • CApply data masking to all fields in the bucket so that patient names are replaced with pseudonyms.
   • DEnable server-side encryption with customer-managed keys and restrict bucket access using IAM policies.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A retail company's cloud-hosted web application was defaced through an SQL injection vulnerability. The development team wants to fix the root cause and prevent similar issues. Which action is the most direct countermeasure?

   • ARequire multi-factor authentication for all application users.
   • BEnable detailed logging and alerting on the application server.
   • CDeploy a web application firewall (WAF) to filter malicious requests.
   • DRewrite the application to use parameterized queries and conduct regular code reviews.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which component is essential for alerting security teams when a suspicious activity is detected in cloud logs?

   • AAlerting rules
   • BData masking
   • CNetwork segmentation
   • DEncryption keys
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A healthcare organization stores patient records in a cloud object storage bucket. They must protect the data from unauthorized access if the bucket is misconfigured. Which countermeasure is most effective for protecting the data itself?

   • AApply a bucket policy that denies all public access
   • BEncrypt the data at rest using customer-managed keys
   • CPlace the bucket in a private subnet with a network ACL
   • DEnable detailed logging on the bucket
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A cloud administrator accidentally granted a contractor full administrative access to a project instead of read-only access. The contractor left the company, but the account remains active. Which combination of countermeasures should be applied?

   • AAdd the contractor's account to a security group that blocks network access.
   • BChange the contractor's password and require MFA on the account.
   • CDisable the contractor's account and review all IAM policies to enforce least privilege.
   • DEnable logging on the account to monitor for suspicious activity.
   Reveal Solution Discussion Select an answer first