Cloud Security Risks, Attacks, and Best Practices NDE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which cloud security best practice ensures that users have only the permissions necessary to perform their job functions?

   • APrinciple of least privilege
   • BEncryption of data at rest
   • CIncident response planning
   • DContinuous monitoring
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A security analyst is reviewing cloud access logs and notices that a user account has been making API calls from an IP address in a country where the company has no operations. The user is a system administrator. What should the analyst do first?

   • AIgnore the alert because the user is a system administrator and may have legitimate reasons.
   • BBlock the IP address at the cloud firewall.
   • CInvestigate the activity by checking the user's recent behavior and the context of the API calls.
   • DDisable the user account immediately and reset the password.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company uses a cloud-based customer database. The database is accessible from the internet through a public endpoint. The security team is concerned about the risk of a data breach due to misconfigured security groups. What is the most effective way to reduce the attack surface?

   • AEnable encryption at rest for the database.
   • BSet up a VPN for remote access to the database.
   • CRestrict the security group to allow traffic only from the application server's IP address.
   • DEnable database audit logging.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which of the following is a common cloud security risk that occurs when cloud resources are left accessible to the public due to incorrect configuration settings?

   • AMisconfiguration
   • BAccount hijacking
   • CInsecure APIs
   • DData breach
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company's cloud environment is experiencing a data breach. The security team has identified that the attacker used a compromised API key to access a storage bucket containing customer data. The team needs to contain the breach while preserving evidence for forensic analysis. Which sequence of actions is most appropriate?

   • ARevoke the compromised API key, enable bucket versioning and logging, and take a snapshot of the bucket for analysis.
   • BChange the storage bucket's permissions to private and continue monitoring.
   • CDelete the storage bucket immediately to prevent further data loss.
   • DNotify law enforcement before taking any action.
   Reveal Solution Discussion Select an answer first