Managing Cloud Security GSLC Practice Questions (Page 10)

Questions 46–49

1. 46foundation · easy

   Which of the following is a security risk that is unique to cloud environments compared to traditional on-premises data centers?

   • ALoss of data due to hard drive failure
   • BInsider threats from employees with physical access
   • CMisconfiguration of cloud storage and compute resources
   • DInadequate firewall rules on internal network segments
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A company is selecting a cloud provider for a new application that will process personal data of EU citizens. The provider has data centers in the EU and the US. The company's legal team requires that the data remain in the EU, but the provider's US data centers offer better performance. The company also needs to ensure that the provider can be audited. Which approach best balances the requirements?

   • AUse both data centers and allow data to flow freely between them.
   • BUse the US data center for better performance and rely on the provider's GDPR compliance.
   • CUse the US data center but encrypt all data to protect it.
   • DChoose the EU data center for data storage and processing, and include audit rights in the contract.
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A global company is moving its employee HR system to a cloud provider. The system contains personal data of employees in the EU and Asia. The company must comply with GDPR and various Asian data protection laws. The provider offers data residency options in multiple regions. The company's security team must design a solution that meets all legal requirements while minimizing operational complexity. What should the team do?

   • AEncrypt all data and store it in any region, relying on encryption for compliance
   • BStore all data in the EU region to simplify compliance with GDPR
   • CStore EU employee data in the EU and Asian employee data in the respective Asian regions
   • DUse a single region outside both the EU and Asia to avoid conflicting laws
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A company is moving a web application to a cloud provider using IaaS. The security team wants to protect the application from common web attacks and also ensure that only authorized administrators can access the management interface. Which set of controls should the team implement?

   • AEncrypt all data at rest and use a bastion host for admin access.
   • BUse a VPN for all user traffic and disable the admin interface.
   • CEnable network security groups and restrict all inbound traffic to the application.
   • DDeploy a web application firewall (WAF) and enforce multi-factor authentication (MFA) for administrative access.
   Reveal Solution Discussion Select an answer first