Analyze Risks Associated with Cloud Infrastructure and Platforms CCSP Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is evaluating the risk of a cloud service outage. The security team assesses the likelihood as high because the provider has had recent outages, but the impact is low because the company has a robust disaster recovery plan. The company decides to accept the risk. Which factor most likely influenced this decision?

   • AThe low impact outweighs the high likelihood
   • BThe disaster recovery plan eliminates the risk
   • CThe company has no risk appetite
   • DThe high likelihood makes the risk unacceptable
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   During the risk identification phase for a cloud migration, which activity is the PRIMARY focus?

   • ACataloging assets, threats, and vulnerabilities
   • BDetermining the risk appetite of the organization
   • CSelecting security controls to mitigate identified risks
   • DCalculating the annualized loss expectancy for each risk
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which output is produced directly from the risk identification process?

   • AA prioritized list of risks with assigned risk levels
   • BA cost-benefit analysis of potential security controls
   • CA comprehensive inventory of assets, threats, and vulnerabilities
   • DA decision to accept, mitigate, transfer, or avoid each risk
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security team is conducting a risk assessment for a cloud-based application. They have identified the application as an asset, the potential for a data breach as a threat, and the lack of encryption as a vulnerability. They are now assessing the likelihood and impact of the threat exploiting the vulnerability. Which phase of the risk management process are they in?

   • ARisk identification
   • BRisk monitoring
   • CRisk treatment
   • DRisk analysis
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary goal of a denial-of-service (DoS) attack in a cloud environment?

   • ATo gain administrative control
   • BTo steal sensitive data
   • CTo modify data integrity
   • DTo disrupt the availability of a service
   Reveal Solution Discussion Select an answer first