Comprehend and Apply the Specifics of Cloud Application Architecture CCSP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In cloud application architecture, what is the primary purpose of sandboxing?

   • ATo encrypt all data stored by an application to prevent unauthorized access
   • BTo isolate an application or process so that its actions are restricted to a controlled set of resources
   • CTo provide a virtual network layer that filters traffic between application components
   • DTo automatically patch vulnerabilities in an application during runtime
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In a Docker architecture, what is the role of the Docker daemon?

   • AIt is the background service that manages Docker objects such as images, containers, networks, and volumes.
   • BIt is the client-side command-line tool used to build and manage containers.
   • CIt is the orchestration tool that schedules containers across a cluster of nodes.
   • DIt is the runtime that executes container processes directly on the host kernel.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which statement best describes application virtualization in a cloud environment?

   • AIt compiles application source code into a single executable that runs without any external dependencies.
   • BIt uses a hypervisor to run multiple operating systems on a single physical server.
   • CIt creates a separate virtual machine for each application to ensure complete isolation from other workloads.
   • DIt isolates an application from the underlying operating system by packaging it with a minimal set of runtime components.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a common security consideration when using orchestration tools to deploy cloud applications?

   • AUsing the same credentials for all orchestration components to simplify management
   • BEnsuring that orchestration APIs and administrative interfaces are protected with strong authentication and authorization
   • CAvoiding the use of secrets management because orchestration tools handle secrets automatically without risk
   • DDisabling all logging to reduce the attack surface
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   In a cloud key management service, what is the purpose of separating the key used to encrypt data (data encryption key) from the key used to encrypt that key (key encryption key)?

   • ATo eliminate the need for a hardware security module
   • BTo enable the data encryption key to be rotated independently without re-encrypting all data
   • CTo ensure that the data encryption key is stored in plaintext
   • DTo allow the key encryption key to be shared with all users
   Reveal Solution Discussion Select an answer first