Understand Security Concepts Relevant to Cloud Computing CCSP Practice Questions (Page 6)

Questions 26–30

1. 26expert · medium

   A company is designing a threat model for a new cloud-based application that will handle customer payment data. The application uses a public API, a database, and a third-party payment processor. The security team has identified the following assets: customer PII, payment card data, and the API's authentication tokens. Which threat modeling approach would be most effective in prioritizing the risks to these assets?

   • AUse the STRIDE model to identify threats by category (spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege) and map them to the assets.
   • BUse a simple checklist of common cloud threats (e.g., data breach, misconfiguration) and apply it to the application.
   • CFocus only on the most likely threat (e.g., data breach) and design controls for that threat.
   • DUse the PASTA model to focus on the attacker's perspective and the impact on the business.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company is decommissioning a storage array that contains encrypted customer data. The data was encrypted using a key that is stored only in the array's local key manager. The array will be returned to the leasing company. The security team must ensure the data is unrecoverable, but the array's disks are not physically destroyed. Which method should be used?

   • APhysically destroy the disks with a shredder before returning the array.
   • BPerform a full overwrite of all disks with a single pass of zeros.
   • CUse degaussing on each disk to destroy the magnetic media.
   • DCryptographically erase the data by securely deleting the encryption key from the array's key manager.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is a security baseline in cloud configuration management?

   • AA known-good configuration that meets security requirements
   • BA list of all cloud users
   • CA backup of all cloud resources
   • DA log of all user activities
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Why is regular patching important for cloud workloads?

   • ATo reduce the cost of cloud services
   • BTo fix known vulnerabilities that could be exploited by attackers
   • CTo comply with data residency requirements
   • DTo increase the performance of the workload
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company is moving a batch processing workload to a serverless function platform. The workload processes sensitive data and runs for a few minutes at a time. The security team is concerned about the ephemeral nature of the functions and wants to ensure that sensitive data is not left behind after execution. Which control should be implemented?

   • AImplement the function to use only in-memory data processing and ensure no data is written to local disk or persistent storage.
   • BUse environment variables to pass sensitive data to the function and rely on the platform to clean them up.
   • CEnsure the function code writes all sensitive data to a persistent volume and does not delete it.
   • DStore sensitive data in a shared temporary directory that is accessible to all functions.
   Reveal Solution Discussion Select an answer first