Securely Accessing Cloud Services GPCS Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Why is it important to monitor access logs for cloud services?

   • ATo improve the performance of the cloud service
   • BTo automatically encrypt all data in the cloud
   • CTo detect unauthorized access attempts and suspicious activity
   • DTo reduce the cost of cloud services
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company's security team wants to detect unauthorized use of cloud credentials. They have enabled logging for all API calls. Which additional practice is most important?

   • ARegularly review access logs for unusual activity and set up alerts.
   • BOnly log successful logins.
   • CStore logs in a public bucket for easy access.
   • DDisable logging to reduce storage costs.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company has a cloud environment with three teams: developers, data scientists, and auditors. The developers need to deploy code, the data scientists need to read data from storage, and the auditors need read-only access to all resources. The company wants to minimize administrative overhead while following the principle of least privilege. What is the most efficient IAM design?

   • ACreate individual users for each team member and assign each user a custom policy with the exact permissions they need.
   • BCreate one role with all permissions and assign it to every user in the organization.
   • CCreate a single group for all users and assign a role that includes both deployment and read-only permissions.
   • DCreate three groups (Developers, DataScientists, Auditors), assign each group a role with the necessary permissions, and add users to the appropriate groups.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A company's security policy requires phishing-resistant MFA for all cloud administrators. The administrators use a mix of corporate laptops and personal mobile devices. Which MFA method is most appropriate?

   • AWebAuthn with hardware security keys.
   • BSMS one-time passcodes.
   • CTOTP via an authenticator app on personal phones.
   • DEmail-based verification codes.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company is implementing a new cloud environment and wants to ensure that all access to the cloud console is protected by MFA. The company also wants to allow a small group of break-glass administrators to access the console without MFA in an emergency. Which approach best balances security and operational needs?

   • AUse a separate identity provider for break-glass administrators with a different MFA policy.
   • BCreate a conditional access policy that requires MFA for all users except the break-glass administrators, and monitor their usage closely.
   • CRequire MFA for all users, including break-glass administrators.
   • DDisable MFA for the break-glass administrators and do not monitor their usage.
   Reveal Solution Discussion Select an answer first