Analyze Risks Associated with Cloud Infrastructure and Platforms CCSP Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   A company uses a cloud-based customer relationship management (CRM) platform. A security analyst discovers that a former employee's credentials were used to access the CRM from an unfamiliar IP address two weeks after the employee's departure. The analyst confirms the account was not disabled upon termination. Which risk treatment strategy should the company implement to address the root cause?

   • AAccept the risk because the former employee did not cause any damage.
   • BImplement an automated user deprovisioning process that disables accounts when employees leave.
   • CConduct a one-time review of all user accounts to remove inactive accounts.
   • DPurchase cyber liability insurance to cover losses from potential account hijacking incidents.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security analyst is reviewing a cloud service provider's shared responsibility model. The analyst notes that the provider is responsible for patching the hypervisor, but the customer is responsible for patching the guest operating system. Which type of vulnerability is the customer most concerned about?

   • AMisconfigurations
   • BShared technology vulnerabilities
   • CInsecure APIs
   • DData breaches
   Reveal Solution Discussion Select an answer first