Cloud Vulnerability Analysis GCTD Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A security engineer is reviewing a cloud environment and finds that a Kubernetes cluster's API server is accessible from the internet without authentication restrictions. Which type of cloud vulnerability does this represent?

   • AInsecure API exposure
   • BOpen storage bucket
   • CMisconfigured IAM policy
   • DInsecure network settings
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A cloud administrator discovers that an Azure Network Security Group (NSG) associated with a web server subnet allows inbound traffic from 'Internet' on port 3389 (RDP). The web server only needs to serve HTTPS traffic. What is the most appropriate remediation?

   • AChange the RDP port to a non-standard port.
   • BDisable RDP on the web server entirely.
   • CRemove the inbound rule allowing RDP from the Internet and restrict RDP to a specific admin IP range.
   • DAdd a rule to allow RDP only from the web server's own IP.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A security team uses a cloud-native vulnerability scanner to identify vulnerabilities in their AWS environment. After remediating a critical vulnerability, the team wants to ensure the fix is effective and no new vulnerabilities have been introduced. Which step is part of the vulnerability lifecycle management process?

   • ADisable the vulnerability scanner to reduce false positives
   • BRe-run the vulnerability scan to verify the remediation and check for new issues
   • CClose the vulnerability ticket without further action
   • DDocument the remediation but do not re-scan
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is the primary security impact of an overly permissive IAM policy that grants 'Action: *' on all resources?

   • AIt exposes the account to SQL injection attacks
   • BIt allows any user to delete or modify all resources in the account
   • CIt increases network latency for all users
   • DIt prevents users from accessing any cloud resources
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A security team has identified several vulnerabilities in a cloud environment: a high-severity SQL injection in an internal tool, a medium-severity SSRF in a public-facing API, and a low-severity information disclosure in a public S3 bucket. The team has limited time and must decide which to remediate first. Which vulnerability should be prioritized?

   • AThe SQL injection in the internal tool
   • BThe information disclosure in the public S3 bucket
   • CThe SSRF in the public-facing API
   • DAll three should be remediated simultaneously
   Reveal Solution Discussion Select an answer first