Build and Implement Physical and Logical Infrastructure for Cloud Environment CCSP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which security measure is specifically used to protect the management interface of a hypervisor?

   • AEnabling hyper-threading on the physical processor to improve performance.
   • BRestricting access to the management network and using strong authentication.
   • CAssigning each virtual machine a public IP address for remote management.
   • DDisabling all virtual machine snapshots to prevent data leakage.
   Reveal Solution Discussion Select an answer first
2. 12foundation · medium

   A cloud service provider offers a key management service that uses a hardware security module (HSM) to protect customer master keys. Which statement accurately describes the role of the HSM in this scenario?

   • AThe HSM is a software-based vault that encrypts the master keys with a passphrase and stores them in a cloud storage bucket for high availability.
   • BThe HSM stores the master keys in a tamper-resistant hardware device and performs cryptographic operations with them, so the keys never leave the device in plaintext.
   • CThe HSM is a backup appliance that replicates master keys to multiple regions to ensure they are never lost.
   • DThe HSM is a network firewall that filters access to the key management service and prevents unauthorized API calls.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When configuring virtual memory for a guest VM, which practice directly reduces the risk of information leakage between VMs due to memory reuse?

   • ADisabling memory deduplication
   • BAssigning more memory than the physical host has
   • CEnabling memory overcommitment
   • DConfiguring memory zeroing on VM deallocation
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In a cloud virtual network, which component acts as a stateful packet filter that evaluates inbound and outbound traffic against configured rules?

   • ADNS zone
   • BNetwork security group
   • CVirtual network peering
   • DRoute table
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   When installing a cloud management tool, which of the following is the MOST important initial step to ensure secure configuration?

   • ADisable logging to reduce performance overhead.
   • BUse the default administrator password for the first login and change it later.
   • CInstall the tool on the same server as the production database for efficiency.
   • DEnable multi-factor authentication for all administrative accounts.
   Reveal Solution Discussion Select an answer first