Understanding Shared Responsibility and Threat Informed Defense GCLD Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In the shared responsibility model, which statement best describes the division of security responsibilities for an IaaS (Infrastructure as a Service) deployment?

   • AThe provider secures everything from the physical facility through the application layer, and the customer is responsible only for their user access.
   • BThe provider and customer share equal responsibility for every security control, including physical security and application code.
   • CThe customer is responsible for securing the physical data center and network, while the provider secures the virtual machines and applications.
   • DThe provider secures the physical hosts and network, while the customer is responsible for securing the guest OS, applications, and data.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following best describes how adversary tactics, such as those in the MITRE ATT&CK framework, are used in a threat informed defense?

   • AThey are legal requirements that all cloud providers must implement.
   • BThey provide a common language to describe adversary behavior, which helps map security controls to specific attack techniques.
   • CThey are used to automatically block all malicious IP addresses before they can reach the cloud.
   • DThey are used to replace the need for security monitoring and detection tools.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A cloud security team is reviewing threat intelligence that shows a specific adversary group frequently exploits misconfigured cloud storage buckets to exfiltrate data. The team wants to implement a control that directly addresses this threat pattern. Which control is most directly informed by this intelligence?

   • ADeploying a cloud access security broker (CASB) to monitor user activity.
   • BConfiguring bucket policies to deny public access and auditing permissions regularly.
   • CEnabling server-side encryption for all storage buckets.
   • DImplementing network-level access control lists (ACLs) on the virtual network.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company is using a cloud provider's IaaS to host a database server. The provider offers a managed database service that would reduce patching responsibilities, but the company's compliance requirements mandate that they maintain full control over the database configuration. Which option best satisfies the compliance requirement while still leveraging cloud benefits?

   • AUse IaaS and manually configure the database without any automation.
   • BUse the managed database service and accept the provider's default configuration.
   • CUse the managed database service and configure it to meet compliance requirements.
   • DUse IaaS and implement automated configuration management for the database.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of using threat intelligence in a threat informed defense strategy?

   • ATo replace the need for vulnerability scanning by predicting all future attacks.
   • BTo guarantee that no security breach will ever occur in the cloud environment.
   • CTo prioritize security controls based on real-world adversary tactics, techniques, and procedures (TTPs).
   • DTo automatically patch all vulnerabilities without human intervention.
   Reveal Solution Discussion Select an answer first