Understanding Shared Responsibility and Threat Informed Defense GCLD Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security analyst is reviewing threat intelligence reports that describe a new adversary group targeting cloud environments. The reports indicate the group uses stolen credentials to access management consoles, then creates new administrative accounts to maintain persistence. Which cloud security control is most directly informed by this threat intelligence?

   • AEnabling multi-factor authentication (MFA) for all console users.
   • BImplementing network segmentation between application tiers.
   • CEncrypting data at rest using customer-managed keys.
   • DDeploying a web application firewall (WAF) in front of the application.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is evaluating a serverless function-as-a-service (FaaS) platform to run a data processing job. The provider manages the servers and runtime. Which security control is the customer responsible for implementing?

   • AConfiguring the network firewall for the physical hosts.
   • BManaging the operating system of the function runtime.
   • CSecuring the function code and its dependencies.
   • DPatching the underlying virtual machines that run the functions.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is using a cloud provider's software-as-a-service (SaaS) email platform. The provider is responsible for the infrastructure and the application. Which security responsibility remains with the customer?

   • AManaging user access and permissions within the email platform.
   • BConfiguring the network firewall for the email application.
   • CSecuring the physical data center where the email servers are hosted.
   • DPatching the email server operating system.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is migrating a legacy application to the cloud and must choose between IaaS and PaaS. The security team has limited staff and wants to minimize the operational burden of patching operating systems, but the application requires a specific OS configuration that is not supported by the PaaS offering. Which approach best balances security and operational constraints?

   • AUse a serverless function to run the application without any OS management.
   • BUse PaaS and accept the lack of custom OS configuration.
   • CUse IaaS and automate OS patching with a configuration management tool.
   • DUse IaaS and manually patch the OS on a quarterly basis.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security operations center (SOC) receives a threat intelligence report indicating that a specific adversary group is using phishing emails to steal cloud administrator credentials, then leveraging those credentials to access cloud management APIs. Which control is most directly informed by this threat intelligence?

   • AImplementing conditional access policies that require MFA for administrative accounts.
   • BDeploying a network intrusion detection system (IDS) to monitor east-west traffic.
   • CConfiguring a web application firewall (WAF) for the management portal.
   • DEncrypting all data in transit using TLS.
   Reveal Solution Discussion Select an answer first