Cloud Security and Cloud Vulnerabilities ISE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is migrating its IoT data processing to a public cloud and must comply with GDPR. The company processes personal data of EU citizens. The compliance officer insists that all personal data must remain in the EU. The cloud provider offers regions in the EU and outside. Which action best satisfies the compliance requirement?

   • ADeploy all personal data processing to an EU region and ensure data transfers outside the EU are covered by appropriate safeguards.
   • BSign a data processing agreement with the cloud provider.
   • CUse a private cloud to avoid GDPR requirements.
   • DEncrypt all personal data and store encryption keys in the EU.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A developer accidentally exposes a cloud storage bucket containing IoT device firmware updates. The bucket is publicly readable, and the developer used a hardcoded API key in the application code. Which two vulnerabilities are present in this scenario?

   • AMisconfiguration and insecure API
   • BInsecure API and data breach
   • CMisconfiguration and data breach
   • DData breach and denial of service
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which type of security control is used to identify and alert on ongoing or past security incidents in a cloud environment?

   • ADetective control
   • BCorrective control
   • CDeterrent control
   • DPreventive control
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security architect is designing a cloud environment for an IoT platform that must meet a regulatory requirement for immediate response to security incidents. The architect must choose a control that can automatically isolate a compromised device without human intervention. Which control type is most appropriate?

   • ADetective control that generates alerts for security analysts.
   • BDeterrent control that displays warning messages to potential attackers.
   • CCorrective control that triggers automated isolation based on predefined rules.
   • DPreventive control that blocks all traffic from unknown devices.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A cloud security engineer is reviewing a threat intelligence feed that reports a vulnerability in a popular IoT device management API. The engineer's organization uses a different API vendor. The engineer must decide how to respond. Which action is most appropriate?

   • AApply the vendor's patch without verifying the vulnerability.
   • BImmediately block all external access to the organization's API.
   • CAssess whether the reported vulnerability affects the organization's API version and configuration.
   • DIgnore the report because the organization uses a different vendor.
   Reveal Solution Discussion Select an answer first