Comprehend and Apply the Specifics of Cloud Application Architecture CCSP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · medium

   A security architect is designing a system where a client application sends sensitive data to a cloud service. The data must be encrypted in transit and at rest, and the recipient must be able to verify the integrity and origin of the data. Which combination of cryptographic techniques best achieves these goals?

   • AUse a digital signature for transit and at rest, and rely on the signature for encryption
   • BUse hashing for transit and at rest, and rely on the hash for authentication
   • CUse only symmetric encryption for both transit and at rest, and rely on a hash for integrity
   • DUse TLS for transit, AES for at-rest encryption, and a digital signature for integrity and origin
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a Docker-based cloud application, what is the primary purpose of a container image?

   • AA running instance of an operating system kernel with its own isolated user space and process tree.
   • BA configuration file that defines the network ports, storage volumes, and environment variables for a container.
   • CA repository that stores multiple versions of an application's source code and build artifacts.
   • DA lightweight, standalone, executable package that includes the code, runtime, system tools, libraries, and settings needed to run the application.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the role of a container orchestration platform, such as Kubernetes, in application security?

   • AIt automatically enforces all security policies without any configuration from the user
   • BIt manages the deployment, scaling, and networking of containers, and can integrate with security policies such as network segmentation and secrets management
   • CIt replaces the need for any other security controls in the application stack
   • DIt primarily focuses on encrypting container images at rest
   Reveal Solution Discussion Select an answer first
5. 9foundation · medium

   An e-commerce application runs on multiple virtual machines in a cloud environment. The operations team needs to distribute incoming HTTP traffic across these VMs to maintain availability during traffic spikes and to enable seamless scaling. Which component is specifically designed to distribute traffic across multiple resources?

   • AWeb Application Firewall (WAF)
   • BAPI gateway
   • CDNS round-robin
   • DLoad balancer
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a primary security benefit of using application virtualization?

   • AIt reduces the attack surface by eliminating the need for a guest operating system.
   • BIt isolates application data and configuration from the host OS, reducing the risk of conflicts and unauthorized access.
   • CIt encrypts all network traffic between the application and the server.
   • DIt prevents all malware from executing on the host system.
   Reveal Solution Discussion Select an answer first