Cloud Computing Threats and Attacks EHE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company's cloud environment is shared with other tenants on the same physical infrastructure. The security team is worried about side-channel attacks that could leak data across tenants. Which mitigation is most effective?

   • AUse strong passwords for all accounts.
   • BEnable multi-factor authentication for all users.
   • CUse dedicated hosts or a private cloud environment to ensure physical isolation.
   • DEncrypt all data in transit and at rest.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A company moves its data to a public cloud and is concerned that it no longer has direct control over the security controls protecting that data. Which cloud security risk does this describe?

   • AData breach
   • BCompliance issue
   • CMulti-tenancy risk
   • DLoss of control
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company runs a critical application in the cloud. The security team wants to implement continuous monitoring to detect anomalies. However, the operations team is concerned about the performance impact of monitoring agents on application latency. Which approach best balances security visibility and performance?

   • ADeploy monitoring agents on all instances to ensure full visibility.
   • BUse a combination of agentless monitoring, log analysis, and network flow logs, with selective agent-based monitoring on non-critical instances.
   • CUse only periodic manual audits instead of continuous monitoring.
   • DDisable all monitoring to avoid performance impact.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company uses a cloud-based application that integrates with multiple third-party services via APIs. A recent audit found that some API keys are stored in plaintext in configuration files. The company wants to improve security without disrupting operations. Which approach is most effective?

   • AUse a secrets management service to store and rotate API keys, and update applications to retrieve them dynamically.
   • BEncrypt the configuration files with a static key stored in the same directory.
   • CUse the same API key for all integrations to simplify management.
   • DEmbed the API keys directly in the application code.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company is considering a multi-cloud strategy to avoid vendor lock-in. However, the security team is concerned about the complexity of managing security across multiple providers. Which approach best addresses this concern?

   • AUse separate security tools for each provider and manage them independently.
   • BUse only one cloud provider to avoid complexity.
   • CUse a centralized security management platform that provides a unified view across all cloud providers.
   • DRely on each provider's native security features without additional tools.
   Reveal Solution Discussion Select an answer first