Cloud Computing Threats and Attacks EHE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company wants to mitigate the risk of data breaches in its cloud environment. Which strategy is most effective?

   • AUsing a single password for all users
   • BDisabling security monitoring to reduce noise
   • CImplementing encryption and strict access controls
   • DGranting all users administrative privileges
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company discovers that a cloud storage bucket was left publicly readable for several months. During that time, an attacker downloaded customer data. The company also finds that the bucket's access logs were disabled. Which combination of threats and mitigation failures does this scenario illustrate?

   • AInsider threat and lack of access control
   • BShared technology vulnerability and lack of patching
   • CAccount hijacking and lack of encryption
   • DMisconfiguration and lack of continuous monitoring
   Reveal Solution Discussion Select an answer first
4. 33expert · hard · select all that apply

   A company's cloud environment was compromised through an insecure API. The investigation shows that the API had no rate limiting and used weak authentication. Which of the following are effective measures to prevent similar API attacks? Select all that apply.

   • AUse API gateways to enforce security policies centrally.
   • BDisable logging for the API to reduce performance overhead.
   • CImplement strong authentication and authorization for all API calls.
   • DImplement rate limiting to prevent abuse and brute-force attacks.
   • EAllow all API requests without authentication to improve usability.
   Check answers Discussion Select an answer first
5. 34foundation · easy

   Which of the following is a common cloud computing threat that occurs when an attacker gains unauthorized access to a user's credentials and uses them to access cloud resources?

   • AData breach
   • BAccount hijacking
   • CDenial of service
   • DMisconfiguration
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A cloud provider experiences a hypervisor vulnerability that could allow tenants to access each other's data. The provider patches the vulnerability, but a tenant is concerned about the risk of future vulnerabilities. Which mitigation strategy is most appropriate for the tenant to reduce their risk?

   • ADisable all network access to the cloud environment
   • BRely solely on the provider's patching process
   • CUse additional encryption for sensitive data and implement strong access controls
   • DMove to a private cloud to eliminate all shared technology risks
   Reveal Solution Discussion Select an answer first