Cloud Integration and Benchmarking GPCS Practice Questions (Page 8)

Questions 36–39

1. 36foundation · easy

   Which security control is most directly applicable to securing APIs that expose cloud services to external partners?

   • AData loss prevention (DLP)
   • BPatch management
   • CNetwork segmentation
   • DAPI authentication and authorization
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the first step in conducting a benchmark assessment of cloud resources against a security baseline?

   • AIdentify the applicable benchmark or baseline
   • BDisable all non-compliant resources
   • CRemediate all identified deviations
   • DGenerate a compliance report
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   After a benchmark assessment, a company finds that several AWS S3 buckets are configured with public read access. The security team needs to remediate this finding while minimizing disruption to the application that uses these buckets. What should they do first?

   • AEnable S3 Block Public Access on all buckets.
   • BCreate a new bucket and migrate the data.
   • CReview the application's requirements to determine if public access is necessary.
   • DRemove the public read access from all buckets immediately.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A security engineer is using the CIS AWS Foundations Benchmark to assess their AWS account. They want to automate the assessment so it runs periodically. Which service should they use?

   • AAWS Trusted Advisor to get security recommendations.
   • BAWS Inspector to scan for vulnerabilities.
   • CAWS Config with conformance packs that include CIS benchmark rules.
   • DAWS CloudTrail to monitor API calls.
   Reveal Solution Discussion Select an answer first