Cloud Computing Threats and Attacks EHE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company stores customer PII in an object storage bucket. A security review reveals that the bucket policy allows 's3:GetObject' for 'Principal: *'. The company has already implemented encryption at rest and in transit. Which immediate action best reduces the risk of a data breach from this configuration?

   • ARemove the public access and restrict the bucket policy to only authenticated users who require access.
   • BAdd a bucket lifecycle policy to transition objects to cold storage after 30 days.
   • CEnable versioning on the bucket to preserve previous versions of objects.
   • DEnable server access logging on the bucket.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company uses a cloud provider for critical applications. To reduce the risk of data breaches, they want to implement a control that protects data even if the underlying storage is compromised. Which mitigation strategy is most effective for this goal?

   • AEncrypting data at rest and in transit
   • BContinuous monitoring of network traffic
   • CRegularly patching operating systems
   • DImplementing strong access control policies
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which cloud attack vector is characterized by a malicious or negligent individual who has legitimate access to cloud resources?

   • AAccount hijacking
   • BInsider threat
   • CInsecure APIs
   • DShared technology vulnerability
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company uses a cloud provider for its customer relationship management (CRM) system. The security team discovers that a former employee's account is still active and has been used to export customer data. The account was not protected by multi-factor authentication. Which combination of threats and attack vectors does this scenario illustrate?

   • AData breach and misconfiguration
   • BInsecure APIs and shared technology vulnerability
   • CCompliance issues and loss of control
   • DAccount hijacking and insider threat
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company wants to mitigate the risk of account hijacking in its cloud environment. They have a limited budget and must choose between implementing multi-factor authentication (MFA) or continuous monitoring. Which choice is more effective for preventing account hijacking?

   • ANeither is effective without encryption
   • BBoth are equally effective
   • CMFA is more effective because it prevents unauthorized access even if credentials are stolen
   • DContinuous monitoring is more effective because it detects attacks in progress
   Reveal Solution Discussion Select an answer first