Trust and Security in the Cloud CLOUD-DIGITAL-LEADER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which security strategy involves implementing multiple layers of security controls so that if one layer fails, others still provide protection?

   • AShared responsibility
   • BLeast privilege
   • CDefense in depth
   • DZero trust
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is implementing a new access control policy for its cloud resources. The security team wants to ensure that only authorized users can access sensitive data, and that each user's access is limited to what is necessary for their role. Which security concept is the team primarily applying?

   • AAuthentication
   • BEncryption
   • CAuthorization
   • DAuditing
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A healthcare organization stores patient data in Google Cloud. They must ensure that the data has not been altered during transmission and that it remains confidential. Which combination of security measures should they implement?

   • AUse strong passwords and multi-factor authentication
   • BUse HTTPS for data in transit and encryption at rest
   • CRegularly back up data to another region
   • DSet up a firewall and restrict access to the network
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security analyst is reviewing the company's cloud environment and identifies a misconfigured storage bucket that is publicly accessible. The analyst notes that this could lead to unauthorized access to sensitive data. In security terminology, what does the misconfiguration represent?

   • AA risk
   • BA threat
   • CAn exploit
   • DA vulnerability
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's cloud environment is infected with ransomware that encrypts critical files. The company has backups in Google Cloud Storage with versioning enabled. What is the most effective way to recover from this attack?

   • APay the ransom to decrypt the files
   • BRestore the files from the most recent clean backup
   • CDelete the encrypted files and recreate them manually
   • DUse a decryption tool downloaded from the internet
   Reveal Solution Discussion Select an answer first