Trust and Security in the Cloud CLOUD-DIGITAL-LEADER Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A multinational corporation is migrating its applications to Google Cloud. The security team is designing a defense-in-depth strategy. They are concerned about insider threats and want to ensure that no single employee can exfiltrate sensitive data. They also need to comply with data residency requirements in multiple countries. Which combination of controls best addresses these concerns?

   • AImplement data loss prevention (DLP) policies, use encryption, and restrict access based on the principle of least privilege
   • BDisable all logging to reduce the attack surface
   • CUse a single, powerful admin account for all cloud operations
   • DStore all data in a single region to simplify compliance
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In the shared responsibility model for cloud computing, which of the following is typically the responsibility of the cloud customer?

   • APatching the underlying hypervisor
   • BPhysical security of the data center
   • CMaintaining the network infrastructure
   • DManaging access to customer data
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A hospital uses Google Cloud to store patient records. A recent phishing email tricked an employee into revealing their credentials, and the attacker accessed a database containing sensitive health information. The hospital's compliance team is concerned about the confidentiality and integrity of the data. What should the hospital do first to limit the impact and prevent similar incidents?

   • AIncrease the logging level on the database
   • BNotify all patients about the breach
   • CRevoke the compromised credentials and enable multi-factor authentication for all users
   • DRestore the database from the most recent backup
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which security term describes the process of verifying that a user is who they claim to be?

   • AAuthorization
   • BVulnerability
   • CEncryption
   • DAuthentication
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which type of cyberattack typically involves encrypting an organization's data and demanding payment for the decryption key?

   • ADDoS
   • BPhishing
   • CRansomware
   • DInsider threat
   Reveal Solution Discussion Select an answer first