Cloud Computing Threats and Attacks EHE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which mitigation strategy involves implementing policies and mechanisms to ensure that only authorized users can access cloud resources?

   • AEncryption
   • BData backup
   • CContinuous monitoring
   • DAccess control
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company uses a cloud-based identity provider (IdP) for single sign-on. They want to implement conditional access policies to reduce the risk of account hijacking. However, they also want to avoid locking out legitimate users who travel frequently. Which policy is most balanced?

   • ARequire MFA only when users access from new devices.
   • BDisable MFA for all users to avoid inconvenience.
   • CRequire MFA only for users in the IT department.
   • DRequire MFA for all users, but allow trusted locations to skip MFA.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A multinational corporation is evaluating cloud providers for a new application that processes personal data of EU citizens. The legal team emphasizes that data must remain within the EU. Which factor is most critical when selecting a cloud provider?

   • AThe provider offers the lowest cost per GB of storage.
   • BThe provider offers the most advanced machine learning services.
   • CThe provider offers data residency options with regions located in the EU.
   • DThe provider has a strong brand reputation.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company uses a cloud-based database that contains sensitive financial data. They want to protect the data from unauthorized access by the cloud provider's staff. Which control is most effective?

   • AEnable network security groups to restrict access to the database.
   • BEnable audit logging on the database.
   • CUse a strong password for the database administrator account.
   • DUse customer-managed encryption keys (CMK) and enable encryption at rest.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst notices that a cloud application's API endpoint returns detailed error messages that reveal internal stack traces. Which cloud attack vector is most directly facilitated by this issue?

   • AInsecure API
   • BAccount hijacking
   • CInsider threat
   • DShared technology vulnerability
   Reveal Solution Discussion Select an answer first