Cloud Security and Cloud Vulnerabilities ISE Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A security analyst discovers that a cloud storage bucket containing IoT device backups is publicly accessible. The analyst checks the access logs and finds that no unauthorized access has occurred. The company's policy requires that all storage buckets be private. What is the most appropriate immediate action?

   • AChange the bucket's access control to private and document the incident
   • BIgnore the issue because no unauthorized access occurred
   • CDelete the bucket to prevent any potential data exposure
   • DNotify the data subjects of a potential data breach
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which of the following is a common cloud vulnerability caused by improper configuration of cloud resources?

   • ADistributed denial-of-service attacks
   • BMisconfigured storage buckets
   • CInsecure APIs
   • DData breaches due to weak encryption algorithms
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A security analyst at a manufacturing company monitors cloud workloads that process sensor data. Threat intelligence feeds report a new campaign targeting exposed IoT device management APIs. The analyst notices unusual API calls from an IP address previously associated with the campaign. Which action best applies threat intelligence to detect and mitigate the threat?

   • ANotify the cloud provider and ask them to patch the API on the customer's behalf.
   • BDisable the API entirely until the campaign ends.
   • CIgnore the alert because threat intelligence feeds are not reliable for cloud environments.
   • DBlock the IP address at the cloud firewall and review API access logs for other indicators of compromise.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A security operations team receives a threat intelligence report indicating that a specific cloud service provider's API has a known vulnerability. The team's cloud environment uses that API. The vendor has not yet released a patch. What is the most appropriate response?

   • AImplement compensating controls, such as additional monitoring and stricter access controls
   • BIgnore the report because the vendor will patch it eventually
   • CSwitch to a different cloud provider immediately
   • DDisable the API until the patch is released
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A multinational company must comply with data residency regulations that require customer data to remain within a specific country. The company uses a public cloud provider that offers regions in multiple countries. Which action best ensures compliance?

   • ADeploy all workloads and data to a cloud region located within the required country.
   • BUse a private cloud to avoid data residency regulations.
   • CEncrypt all data and store the encryption keys in the required country.
   • DSign a data processing agreement with the cloud provider.
   Reveal Solution Discussion Select an answer first