Build and Implement Physical and Logical Infrastructure for Cloud Environment CCSP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a common method for securely accessing a cloud management plane?

   • AConnecting via Telnet to the management API endpoint.
   • BUsing a web browser with HTTPS and a strong password.
   • CSharing the administrator password with the operations team for convenience.
   • DSending API requests over HTTP to the management endpoint.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which statement correctly describes a Type 1 hypervisor?

   • AIt runs as an application on top of an existing operating system.
   • BIt is a software layer that only provides virtual networking and storage services.
   • CIt runs directly on the host hardware and manages guest operating systems.
   • DIt is a security tool that isolates applications within a single operating system.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of a network access control list (ACL) in a cloud virtual network?

   • ATo encrypt data in transit
   • BTo route traffic between virtual networks
   • CTo control traffic at the subnet level
   • DTo resolve domain names to IP addresses
   Reveal Solution Discussion Select an answer first
5. 9foundation · medium

   A cloud provider is deploying a new hypervisor host. The security team mandates that the host should be configured to minimize its attack surface by default. Which combination of actions best aligns with secure by default principles?

   • AUse a custom configuration that enables every feature, then disable any that cause errors during testing.
   • BEnable all management services for full functionality, then restrict access with firewall rules after deployment.
   • CInstall the hypervisor with default settings and rely on the network firewall to block all external access.
   • DEnable only the management services required for operation, disable unused hardware features, and apply the vendor's baseline security configuration.
   Reveal Solution Discussion Select an answer first
6. 10foundation · medium

   A cloud administrator wants to ensure that a physical server boots only into a trusted operating system. Which TPM feature should be used to establish a hardware-based root of trust and verify the integrity of the boot process?

   • ATPM remote attestation, which uses the TPM's Platform Configuration Registers (PCRs) to measure boot components and provide a signed report of the boot state to a verifier.
   • BTPM key storage, which stores the OS encryption keys inside the TPM so that the bootloader can unlock the disk without user interaction.
   • CTPM sealing, which encrypts the OS kernel with a TPM-bound key so that only the TPM can decrypt it during boot.
   • DSecure Boot, which uses TPM-held keys to validate the digital signature of the bootloader and OS kernel before allowing execution.
   Reveal Solution Discussion Select an answer first