What is the purpose of signing a software artifact (e.g., a container image) in the context of supply chain security?

To automatically deploy the artifact to production

To compress the artifact for faster download

To prove the artifact's origin and integrity

To encrypt the artifact so only authorized users can read it

A security team is investigating a potential breach. They need to determine what actions were taken by a specific user account in the cloud environment. The account is suspected of being compromised. What is the most effective way to gather this information?

Review the network flow logs for the user's IP address.

Check the user's recent activity in the cloud console's dashboard.

Ask the user to provide a list of their recent actions.

Query the cloud audit logs for all actions performed by the user account, including API calls and console sign-ins.

Which network security control in a cloud environment is typically used to create a private, isolated network segment with its own IP address range?

A network access control list (ACL)

A financial services company must comply with a regulation that requires audit logs of all access to sensitive data to be retained for seven years. They are migrating to the cloud and need to ensure their logging configuration meets this requirement. What should they do?

Store logs in a separate bucket with no retention policy, and manually delete them after seven years.

Use a third-party logging service that stores logs for one year, and export them to cold storage after that.

Enable detailed audit logging for the sensitive data and configure a log retention policy of seven years.

Enable basic logging and rely on the cloud provider's default retention period.

LPI DevOps Tools Engineer

Domain 4Objective 1

704.1 Cloud Native Security (weight: 4) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 2)

Part of the 704 Security and Observability domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

Questions 6–10

6foundation · easy
What is the purpose of signing a software artifact (e.g., a container image) in the context of supply chain security?
Select an answer first
7expert · hard
A security team is investigating a potential breach. They need to determine what actions were taken by a specific user account in the cloud environment. The account is suspected of being compromised. What is the most effective way to gather this information?
Select an answer first
8foundation · easy
Which network security control in a cloud environment is typically used to create a private, isolated network segment with its own IP address range?
Select an answer first
9foundation · easy
Which of the following is an example of a regulatory compliance standard that may apply to cloud deployments handling financial data?
Select an answer first
10application · medium
A financial services company must comply with a regulation that requires audit logs of all access to sensitive data to be retained for seven years. They are migrating to the cloud and need to ensure their logging configuration meets this requirement. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DEVOPS-TOOLS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “DEVOPS-TOOLS-ENGINEER” is a trademark of its owner, used for identification only.