Frameworks for Built-In Security GCLD Practice Questions (Page 7)

Questions 31–33

1. 31expert · hard

   A company is using a SaaS CRM system. They are using the CSA Cloud Controls Matrix to assess their security responsibilities. The provider is responsible for the application and infrastructure, but the customer must manage their own data. Which control is MOST likely to be the customer's responsibility?

   • ANetwork intrusion detection
   • BData classification and handling
   • CPhysical security of the data center
   • DApplication security patching
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company is using a cloud provider's serverless function service. They are mapping security controls to the shared responsibility model. Which of the following controls is the customer responsible for implementing?

   • AManaging the function's runtime environment
   • BWriting secure application code and managing function permissions
   • CPatching the underlying servers
   • DSecuring the physical data center
   Reveal Solution Discussion Select an answer first
3. 33application · medium

   A company is adopting the NIST Cybersecurity Framework and needs to implement controls for the 'Protect' function. They are using a cloud provider's identity and access management (IAM) service. Which control implementation aligns with the 'Protect' function?

   • AImplementing a security operations center (SOC)
   • BDeveloping an incident response plan
   • CConducting a risk assessment
   • DEnabling multi-factor authentication (MFA) for all users
   Reveal Solution Discussion Select an answer first