Understand Design Principles of Secure Cloud Computing CCSP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which cloud-specific advantage most directly improves failover capabilities compared to traditional on-premises DR?

   • AAbility to provision resources in multiple geographic regions on demand
   • BAutomatic removal of all security risks
   • CGuaranteed zero downtime during any failure
   • DElimination of the need for backup strategies
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which practice is essential for securing infrastructure as code (IaC) in a DevSecOps environment?

   • AStoring IaC templates in public repositories
   • BUsing hard-coded credentials in IaC
   • CScanning IaC templates for misconfigurations before deployment
   • DAvoiding version control for IaC
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is deploying a web application on an IaaS platform. The company is responsible for securing the operating system, the application, and the data. The cloud provider is responsible for securing the physical hosts, the network, and the hypervisor. Which of the following tasks is the company's responsibility under the shared responsibility model?

   • AConfiguring the virtual network firewall to restrict traffic to the application.
   • BPatching the hypervisor that hosts the company's virtual machines.
   • CManaging the firmware updates for the physical servers.
   • DEnsuring the physical security of the data center where the servers are located.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A DevOps team is implementing a CI/CD pipeline for a cloud-native application. The security team wants to integrate security into the pipeline using DevSecOps practices. The team uses infrastructure as code (IaC) to provision cloud resources. Which practice best integrates security into the CI/CD pipeline?

   • ARunning static application security testing (SAST) on the application code and scanning IaC templates for misconfigurations before deployment.
   • BUsing a single shared administrator account for all pipeline deployments to simplify access management.
   • CDeploying a web application firewall (WAF) in front of the application in production.
   • DConducting a manual security review of the application code after each release.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A software company is developing a new cloud-based application. The security team wants to apply secure by design principles from the inception of the project. The team is in the requirements gathering phase. Which action best demonstrates the application of secure by design at this stage?

   • ASelecting a cloud provider that offers the most security certifications.
   • BDeploying a web application firewall (WAF) in front of the application after it is deployed.
   • CConducting a threat modeling session to identify potential threats and design mitigations before writing code.
   • DWriting a detailed security policy document and storing it in the project repository.
   Reveal Solution Discussion Select an answer first