Cloud Monitoring Fundamentals GCTD Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is using a cloud monitoring solution that generates a large number of alerts. The security team is overwhelmed and has started ignoring alerts. What is the most effective way to address this situation while maintaining a strong security posture?

   • AImplement a risk-based alert prioritization system that highlights high-impact alerts.
   • BIncrease the number of security analysts to handle the alert volume.
   • CReduce the log sources being monitored to decrease the number of alerts.
   • DDisable all non-critical alerts to reduce the volume.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A cloud security analyst is reviewing monitoring coverage for a multi-cloud environment that includes AWS, Azure, and Google Cloud. The analyst needs to ensure that security-relevant events from all three providers are correlated in a single pane of glass. Which approach best meets this need?

   • AEnable Cloud Security Posture Management (CSPM) tools that only check for misconfigurations.
   • BDeploy a SIEM platform that ingests logs from all three providers and applies unified correlation rules.
   • CUse a cloud management dashboard that displays cost and resource utilization for all providers.
   • DConfigure native cloud provider alerts and review them separately in each console.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is migrating its on-premises workloads to the cloud. The security team wants to maintain visibility into potential threats across the new cloud environment. Which monitoring practice is most essential for maintaining security posture during and after migration?

   • ARely on the cloud provider's built-in security features to automatically protect all workloads.
   • BMonitor only the critical production workloads, as development and test environments pose minimal risk.
   • CContinuously monitor cloud configuration, user activity, and network traffic to detect misconfigurations and anomalous behavior.
   • DPerform a one-time security assessment of the cloud environment after migration is complete.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security engineer is configuring monitoring for a Kubernetes cluster running in a hybrid cloud environment. The engineer needs to detect both network-level anomalies and container-level security issues. Which combination of monitoring tools would provide the most comprehensive coverage?

   • AFalco for runtime security and Calico for network policy monitoring
   • BEFK stack for log aggregation and Elasticsearch alerts
   • CKube-bench for CIS compliance and kube-hunter for penetration testing
   • DPrometheus for metrics and Grafana for dashboards
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security team is designing a cloud monitoring solution for a financial services company that must meet strict data residency requirements. They are considering using a third-party SIEM that stores data in a region outside the required jurisdiction. What is the most appropriate action?

   • AUse the SIEM and accept the risk because monitoring is more important than data residency.
   • BSelect a SIEM deployment that allows data to be stored in a region within the required jurisdiction.
   • CStore all monitoring data on-premises and avoid cloud-based SIEM entirely.
   • DUse the SIEM but encrypt all data before transmission to the external region.
   Reveal Solution Discussion Select an answer first