Trust and Security in the Cloud CLOUD-DIGITAL-LEADER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is moving its legacy on-premises applications to Google Cloud. The security team is concerned about the loss of direct control over the network infrastructure. They want to maintain a similar level of security visibility and control. Which approach should they take?

   • ARely solely on the cloud provider's security measures and do not implement additional controls
   • BMove only non-critical applications to the cloud to reduce risk
   • CUse Google Cloud's native monitoring and logging services to gain visibility into network traffic and security events
   • DUse a third-party security tool that is not integrated with Google Cloud
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's employee receives an email that appears to be from the CEO, urgently requesting a wire transfer. The employee follows the instructions and transfers funds to an external account. This is an example of which type of cybersecurity threat?

   • APhishing
   • BRansomware
   • CDistributed denial-of-service
   • DBusiness email compromise
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is moving from an on-premises data center to Google Cloud. The security team is concerned about losing visibility and control over their infrastructure. Which aspect of security remains the customer's responsibility in the cloud?

   • AManaging access to data and applications
   • BSecuring the network infrastructure that connects data centers
   • CPatching the hypervisor that runs virtual machines
   • DPhysical security of the data centers
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A financial services company uses Google Cloud to run a trading application. The application must be available during market hours, and any downtime results in significant revenue loss. The security team is designing a defense-in-depth strategy. Which combination of measures best supports the availability pillar while maintaining security?

   • AUse a single, powerful virtual machine to avoid complexity
   • BImplement redundant infrastructure across multiple zones and use load balancing
   • CConduct regular security audits and penetration testing
   • DEncrypt all data and enforce strict access controls
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which security pillar is most directly concerned with ensuring that systems and data are accessible to authorized users when needed?

   • AIntegrity
   • BAvailability
   • CConfidentiality
   • DControl
   Reveal Solution Discussion Select an answer first