Understand Security Concepts Relevant to Cloud Computing CCSP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the purpose of federated access in cloud IAM?

   • ATo encrypt data between the cloud and on-premises systems
   • BTo monitor all user activity in the cloud
   • CTo create a backup of user accounts in the cloud
   • DTo allow users to use their existing corporate credentials to access cloud resources
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A cloud provider runs a multi-tenant virtualization platform. A security researcher discovers a vulnerability in the hypervisor that could allow a guest VM to read the memory of other guest VMs on the same host. The provider cannot immediately patch the hypervisor. Which additional control should be implemented to reduce the risk of exploitation?

   • AUse network segmentation to isolate guest VMs from each other.
   • BEnable hypervisor-level memory encryption (e.g., AMD SME/SEV or Intel TDX) for all guest VMs.
   • CDisable all VM live migration features.
   • DIncrease the frequency of guest VM patching.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is deploying a new web server in the cloud. The security team wants to harden the operating system before the server is placed into production. Which set of actions should be taken?

   • AUse the default OS image without any changes, and rely on the cloud provider to secure the instance.
   • BInstall the latest patches, disable unnecessary services, remove default accounts, and configure a host-based firewall.
   • CEnable all services to ensure functionality, and rely on the network security group for protection.
   • DChange the default administrator password and enable remote desktop access for all users.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a common threat modeling technique?

   • ACVSS scoring
   • BSTRIDE
   • COWASP Top 10
   • DNIST 800-53
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has a fleet of cloud VMs running a legacy application. The security team has implemented a vulnerability scanning solution that runs weekly. However, the team is concerned about the time between vulnerability discovery and remediation. Which additional control should be implemented to reduce this window?

   • AIncrease the frequency of vulnerability scans to daily and automate the deployment of patches for critical vulnerabilities.
   • BUse a configuration management tool to enforce a baseline and manually review all patches before deployment.
   • CDisable the vulnerability scanner to reduce the number of alerts.
   • DRely on the cloud provider to patch all VMs automatically.
   Reveal Solution Discussion Select an answer first