Cloud Computing Threats and Attacks EHE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which mitigation strategy is used to protect data stored in the cloud by converting it into an unreadable format that can only be reversed with a key?

   • AEncryption
   • BData masking
   • CContinuous monitoring
   • DAccess control
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A hospital is moving patient records to a public cloud. The compliance officer is concerned about regulatory requirements that mandate data residency. Which cloud security risk is most directly addressed by selecting a cloud region within the required country?

   • ACompliance issues
   • BLoss of control
   • CMulti-tenancy risks
   • DData breach
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A hospital is moving patient records to a public cloud. The compliance officer is concerned about multi-tenancy risks and loss of control. Which approach best addresses these concerns while still using the public cloud?

   • AUse a public cloud region in the same country as the hospital.
   • BEncrypt all data with a key managed by the cloud provider.
   • CStore all data on-premises and only use the cloud for backups.
   • DUse a dedicated single-tenant environment offered by the cloud provider, with contractual assurances and compliance certifications.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company is migrating to the cloud and wants to ensure that their security monitoring covers all layers. They have limited budget and need to prioritize. Which monitoring approach provides the most comprehensive coverage for the investment?

   • AFocus only on log aggregation from all services.
   • BFocus only on cloud provider's native security alerts.
   • CFocus only on application-level monitoring using agents on each VM.
   • DFocus on network-level monitoring, including flow logs and intrusion detection.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A startup uses a cloud provider's API to automate infrastructure provisioning. A developer accidentally commits an API key to a public GitHub repository. Within hours, an attacker uses that key to create several expensive virtual machines. Which combination of controls would have best prevented this attack?

   • ARestrict API access to a specific IP address range.
   • BEnable multi-factor authentication on the root account only.
   • CUse short-lived credentials and rotate keys regularly, and scan repositories for secrets.
   • DUse a longer, more complex API key.
   Reveal Solution Discussion Select an answer first