Cloud Attacks GCIL Practice Questions (Page 1)

Questions 1–5

1. 1expert · medium

   A company is migrating a legacy application to the cloud. The application has strict compliance requirements that mandate the customer control the underlying OS and middleware. The team is considering IaaS, PaaS, and SaaS. Which service model BEST meets the compliance requirement?

   • ASaaS, because the provider manages everything.
   • BAny model, because compliance is the provider's responsibility.
   • CIaaS, because the customer manages the OS and middleware.
   • DPaaS, because the provider manages the OS and middleware.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company is migrating a legacy application to the cloud and is considering using IaaS to maintain control. The security team is concerned about the increased attack surface. Which of the following is a valid trade-off to consider?

   • AIaaS reduces the attack surface because the provider secures the operating system.
   • BIaaS eliminates the need for network security controls.
   • CIaaS provides more control but requires the customer to secure the operating system and applications.
   • DIaaS transfers all security responsibilities to the provider.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company uses a cloud provider's SaaS email service. The security team wants to protect against phishing attacks that could lead to account compromise. Which control is most appropriate?

   • ADeploy a network intrusion detection system in the email service's virtual network
   • BEnable multi-factor authentication for all email users
   • CConfigure a firewall rule to block phishing emails
   • DInstall antivirus software on the email servers
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is migrating a legacy customer database to a cloud provider using a managed PaaS database service. The security team is concerned about the shared responsibility model. Which security control is the CUSTOMER's responsibility in this scenario?

   • AEnsuring physical security of the data center hosting the database.
   • BApplying database engine software updates.
   • CPatching the underlying operating system of the database server.
   • DConfiguring network firewalls to restrict access to the database endpoint.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security analyst notices that a cloud account's compute usage has spiked to 100% for several hours, and the associated billing has increased significantly. The workload is a batch processing job that normally runs for 30 minutes. Which of the following is the most likely cloud-specific attack technique?

   • ADenial of service via a distributed botnet
   • BResource hijacking to mine cryptocurrency
   • CAccount takeover to change the billing address
   • DData exfiltration via a public storage bucket
   Reveal Solution Discussion Select an answer first