Cloud Monitoring Fundamentals GCTD Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is implementing cloud monitoring and wants to ensure that the monitoring system itself is secure. What is a key consideration?

   • AUsing default credentials for the monitoring system to simplify deployment.
   • BStoring monitoring data in a publicly accessible location for easy sharing.
   • CEnsuring that the monitoring system is accessible to all employees for transparency.
   • DProtecting the monitoring data and access to the monitoring system with strong authentication and encryption.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is using a hybrid cloud environment with both on-premises and cloud resources. The security team wants to monitor for threats across the entire environment. What is a critical challenge they must address?

   • AConvincing management that cloud monitoring is necessary for hybrid environments.
   • BEnsuring that all on-premises logs are stored in the cloud for compliance.
   • CDeploying the same security tools on-premises and in the cloud.
   • DCorrelating logs from disparate sources with different formats and time zones.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A DevOps team is deploying a containerized application on Amazon EKS. The security team wants to monitor runtime behavior of containers to detect privilege escalation or unauthorized process execution. Which monitoring solution should they implement?

   • AUse AWS Config rules to check EKS cluster configuration.
   • BDeploy Falco on the EKS cluster to detect anomalous runtime activity.
   • CEnable VPC Flow Logs for the EKS worker nodes.
   • DEnable Amazon CloudWatch Container Insights for the EKS cluster.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A cloud architect is designing a monitoring solution for a serverless application. The application uses multiple functions that process data from various sources. What is a key monitoring consideration for this environment?

   • AMonitoring the physical servers in the cloud provider's data centers.
   • BMonitoring network traffic at the subnet level to detect lateral movement.
   • CMonitoring the underlying virtual machines that host the serverless functions.
   • DMonitoring function invocations, execution durations, and error rates to detect anomalous behavior.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company is implementing a cloud monitoring solution and wants to ensure that it can detect threats that involve compromised credentials. The solution must also comply with privacy regulations that restrict the collection of personal data. What is the best approach?

   • AAvoid monitoring authentication logs to protect user privacy.
   • BAnonymize all logs so that no user can be identified, even if it reduces threat detection capability.
   • CMonitor authentication logs and user behavior while minimizing the collection of personal data through data minimization techniques.
   • DCollect all available logs, including personal data, to ensure comprehensive threat detection.
   Reveal Solution Discussion Select an answer first