Risk Management and Compliance GCLD Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has a cloud environment with a mix of IaaS and PaaS services. They have identified a risk that a misconfigured identity and access management (IAM) policy could allow unauthorized access to sensitive resources. They want to implement a monitoring control to detect this risk. Which control is most effective?

   • AUse a firewall to restrict access to the management console
   • BEnable cloud provider's access logging and set up alerts for policy changes
   • CConduct quarterly access reviews
   • DImplement multi-factor authentication for all users
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is evaluating a cloud provider for hosting a customer-facing application that will process credit card payments. The company is required to be PCI DSS compliant. The provider offers a SaaS solution that includes a payment gateway. Which of the following is the most important consideration for the company's PCI DSS compliance?

   • AThe provider's PCI DSS attestation of compliance (AOC)
   • BThe provider's data residency options
   • CThe provider's ISO 27001 certification
   • DThe provider's SOC 2 Type II report
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is planning to migrate its customer relationship management (CRM) system to a public cloud. The risk assessment identifies that the CRM data includes sensitive personal information. Which risk treatment strategy would be most appropriate for the risk of a data breach?

   • ATransfer the risk by purchasing cyber insurance
   • BMitigate the risk by implementing encryption and access controls
   • CAccept the risk because the cloud provider is responsible for security
   • DAvoid the risk by not migrating to the cloud
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is using a cloud provider's serverless function service to process user uploads. The function stores files in a cloud storage bucket. Which security responsibility does the customer retain?

   • APatching the runtime environment of the serverless function
   • BManaging the physical servers that execute the function
   • CConfiguring the function's code to validate user input
   • DEnsuring the storage bucket is replicated across regions
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is an example of a compliance failure risk in a cloud deployment?

   • AUsing a cloud provider that has multiple availability zones
   • BImplementing multi-factor authentication for user accounts
   • CChoosing a provider that offers encryption at rest
   • DStoring personal data in a region that does not meet the required data residency regulations
   Reveal Solution Discussion Select an answer first