Understand Security Concepts Relevant to Cloud Computing CCSP Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company is decommissioning a cloud storage bucket that contains archived customer records. The records are encrypted with a customer-managed key. The company must ensure that the data is unrecoverable and that the storage bucket is released back to the cloud provider. Which sequence of actions should be taken?

   • AOverwrite the data in the bucket with zeros, then delete the bucket.
   • BDelete the customer-managed key first, then delete the storage bucket.
   • CDelete the storage bucket first, then delete the customer-managed key.
   • DDelete the bucket and rely on the cloud provider to sanitize the underlying storage.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A cloud security team is designing access controls for a new multi-account environment. The compliance team requires that no single administrator can both create a new user and assign that user administrative privileges. The team also wants to minimize the standing privileges of day-to-day administrators. Which combination of controls best meets these requirements?

   • AGrant all administrators full access to user management and role assignment, and require quarterly access reviews.
   • BUse a single break-glass account with full administrative rights for all tasks, and monitor its usage with alerts.
   • CUse two separate administrative roles: one for user creation and one for privilege assignment, and require a second approver for privilege grants.
   • DAssign all administrators the same role that includes both user creation and privilege assignment, but enable multi-factor authentication.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is a potential risk of isolation failure in a multi-tenant cloud?

   • AThe cloud service becomes unavailable due to a DDoS attack
   • BThe cloud provider could lose encryption keys
   • CThe cloud provider could increase prices
   • DOne tenant could access another tenant's data or resources
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is the primary function of a hypervisor in a virtualized environment?

   • ATo monitor and block malicious traffic between VMs
   • BTo encrypt all data stored on the physical host
   • CTo create and manage virtual machines by abstracting the underlying hardware
   • DTo provide a firewall for the virtual network
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Why is isolation important in serverless computing?

   • ATo prevent one function from accessing another function's data or code
   • BTo reduce the cold start time
   • CTo allow functions to share memory for performance
   • DTo enable functions to run on the same operating system
   Reveal Solution Discussion Select an answer first