Managing Cloud Security GSLC Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is moving its customer database to a cloud provider. The database contains personal data of customers in multiple countries, including the EU and the US. The provider offers data centers in both regions. The company's legal team wants to ensure compliance with GDPR while minimizing latency for US customers. Which approach is most appropriate?

   • AUse a single data center in a third country to avoid GDPR issues.
   • BStore all data in the US data center and rely on the provider's GDPR compliance.
   • CStore all data in the EU data center to ensure GDPR compliance.
   • DStore EU customer data in the EU data center and US customer data in the US data center, with appropriate transfer mechanisms.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is an important step in a cloud-specific incident response procedure?

   • AIgnoring cloud provider logs because they are not reliable
   • BPreserving evidence by taking snapshots of affected cloud resources
   • CImmediately deleting all affected resources to prevent further damage
   • DWaiting for the cloud provider to resolve the incident without customer action
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is planning to migrate its on-premises data center to the cloud. The security team is conducting a risk assessment. They have identified that the cloud provider's infrastructure is shared with other customers. What risk is most directly associated with this shared infrastructure?

   • AThe provider may go out of business and lose the company's data
   • BThe company may be unable to scale its resources during peak demand
   • CA vulnerability in the hypervisor could expose the company's data to other tenants
   • DThe company may lose control over its data because it is stored on shared hardware
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In a secure cloud architecture, what is the primary purpose of network segmentation using virtual networks and subnets?

   • ATo isolate workloads and limit the blast radius of a compromise
   • BTo eliminate the need for encryption
   • CTo reduce the cost of cloud networking
   • DTo simplify the management of user identities
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has suffered a ransomware attack on its cloud environment. The attack has encrypted data in a cloud object storage bucket. The incident response team needs to recover the data. The company has enabled versioning on the bucket, but the attacker also deleted some versions. What should the team do to maximize data recovery?

   • ARestore the bucket from the most recent version before the attack
   • BContact the attacker to obtain the decryption key
   • CUse the provider's point-in-time recovery feature to restore the bucket to a state before the attack
   • DDelete the bucket and recreate it with new data
   Reveal Solution Discussion Select an answer first