Cloud Account Fundamentals GCLD Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a recommended security best practice for managing cloud account root user credentials?

   • AUse the root account for daily administrative tasks
   • BShare the root password with all administrators for convenience
   • CEnable multi-factor authentication (MFA) on the root account
   • DStore root access keys in plain text in a shared repository
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which compliance requirement often affects where cloud data can be stored and processed?

   • AInstance type limitations
   • BPassword complexity rules
   • CData residency regulations
   • DNetwork latency benchmarks
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An organization wants to enforce multi-factor authentication (MFA) for all users who access the cloud console. The organization uses a cloud identity provider. What is the most effective way to enforce this?

   • AAsk users to voluntarily enable MFA on their accounts.
   • BConfigure a conditional access policy that requires MFA for all cloud console sign-ins.
   • CCreate a strong password policy and require users to change passwords every 30 days.
   • DDisable access keys for all users and require them to use the console only.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security team is reviewing the account security posture. They notice that several users have long-lived access keys that have never been rotated. What should they do to improve security?

   • ADelete all access keys and require users to use the AWS Management Console only.
   • BRotate the access keys immediately and enforce a rotation policy that requires keys to be changed every 90 days.
   • CDisable the users' accounts and create new ones with new access keys.
   • DLeave the keys as they are because they are only used for read-only access.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A large enterprise is migrating multiple business units to the cloud. Each business unit needs its own billing boundary and the ability to manage its own resources, but the enterprise must maintain centralized governance and compliance policies. The enterprise also wants to avoid creating separate cloud accounts for each unit. What is the best approach?

   • AUse a single subscription/project and grant each business unit Owner access to the entire subscription.
   • BCreate a single subscription/project for all business units and use tags to separate resources.
   • CCreate a separate cloud account for each business unit and link them all to a single billing account.
   • DCreate a separate subscription/project for each business unit under the organization's hierarchy.
   Reveal Solution Discussion Select an answer first