Cloud Attacks GCIL Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   To mitigate the risk of data exposure due to misconfigured cloud storage, which control should be implemented?

   • ADisabling logging on storage access
   • BIncreasing the number of storage buckets
   • CUsing only public access for all buckets
   • DRegular access reviews and least-privilege policies
   Reveal Solution Discussion Select an answer first
2. 27expert · medium

   During a cloud incident, the response team needs to determine the scope of the compromise. They have access to CloudTrail logs, VPC flow logs, and storage access logs. Which combination of logs would provide the MOST comprehensive view of the attack?

   • AStorage access logs only.
   • BCloudTrail logs only.
   • CCloudTrail logs and storage access logs.
   • DVPC flow logs only.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A startup uses a cloud provider's API gateway to expose a set of microservices. A security review finds that the API gateway has no rate limiting, no authentication on several endpoints, and verbose error messages. Which attack vector is the MOST directly enabled by this configuration?

   • AData exfiltration via misconfigured storage.
   • BAPI abuse and unauthorized data access.
   • CResource hijacking via cryptocurrency mining.
   • DAccount takeover via phishing.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An organization notices a sudden spike in compute usage on its cloud account. Investigation reveals that an attacker used a compromised API key to launch a large number of cryptocurrency mining instances. The instances are running under the organization's account. What is the MOST immediate action to contain the incident?

   • AEnable multi-factor authentication on all user accounts.
   • BContact the cloud provider to request a credit for the compute charges.
   • CTerminate the unauthorized instances and revoke the compromised API key.
   • DTake a snapshot of the mining instances for forensic analysis.
   Reveal Solution Discussion Select an answer first
6. 30expert · medium

   A company is evaluating cloud service models for a new application. The application has unpredictable traffic patterns and the team wants to minimize operational overhead. However, they also need to ensure they can customize the application's runtime environment. Which service model BEST balances these needs?

   • APaaS, because it provides a managed runtime with some customization options.
   • BIaaS, because it provides full control over the runtime.
   • CSaaS, because it requires no management.
   • DServerless, because it scales automatically and requires no management.
   Reveal Solution Discussion Select an answer first