Cloud Integration and Benchmarking GPCS Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which industry-standard benchmark is commonly used to assess the security configuration of cloud services, such as operating systems and cloud platforms?

   • AISO 27001
   • BNIST SP 800-53
   • COWASP ASVS
   • DCIS Benchmarks
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company has a large cloud environment with hundreds of resources. A benchmark assessment has identified numerous deviations. The security team has limited resources and must prioritize remediation. What is the most effective prioritization strategy?

   • ARemediate all findings in alphabetical order.
   • BWait for the next scheduled audit to address all findings.
   • CRemediate the easiest findings first to reduce the count quickly.
   • DPrioritize based on the risk level of the finding, focusing on those that could lead to data exposure or privilege escalation.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A healthcare organization is integrating its on-premises patient records system with a cloud-based analytics platform. The integration uses a REST API that transmits protected health information (PHI). The organization must comply with HIPAA. Which control is most directly required for the data in transit?

   • AUse an API gateway to throttle requests and log all access.
   • BImplement a Web Application Firewall (WAF) in front of the API.
   • CEncrypt the API traffic using TLS 1.2 or higher.
   • DStore the PHI in an encrypted database in the cloud.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security team is assessing a new AWS account that hosts a web application. They need to compare their configuration against a recognized industry baseline. Which approach should they use?

   • ARun a CIS Benchmark scan using a tool like AWS Security Hub or a third-party scanner.
   • BUse the AWS Trusted Advisor dashboard to check for security best practices.
   • CReview the AWS Well-Architected Framework documentation manually.
   • DPerform a penetration test against the application to identify vulnerabilities.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security team has conducted a benchmark assessment and found that a critical application has a misconfiguration that could lead to data exposure. The team must remediate the issue, but the application cannot be taken offline. What is the best approach?

   • AImmediately shut down the application to prevent exposure.
   • BApply a compensating control, such as a network security group rule, to mitigate the exposure while planning a proper fix.
   • CApply the fix without testing, as it is urgent.
   • DIgnore the finding until the next maintenance window.
   Reveal Solution Discussion Select an answer first