704.1 Cloud Native Security (weight: 4) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has an incident response plan for their cloud environment. They want to ensure that they can quickly identify the scope of a breach and contain it without losing forensic evidence. They also want to automate the initial response as much as possible. What should they implement?

   • ASet up a script that automatically deletes compromised resources and restores from backup.
   • BUse a monitoring tool that alerts the team of potential breaches, and rely on the team to respond.
   • CManually isolate compromised resources and take snapshots according to the incident response plan.
   • DUse a cloud security orchestration, automation, and response (SOAR) platform that integrates with cloud monitoring and can automatically isolate compromised resources while preserving snapshots.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which IAM principle is most directly applied when a cloud service is granted a temporary set of permissions to perform a specific task?

   • AFail-safe defaults
   • BDefense in depth
   • CSeparation of duties
   • DPrinciple of least privilege
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does infrastructure as code (IaC) contribute to security automation?

   • ABy allowing security controls to be defined and deployed consistently as code
   • BBy encrypting all data in the cloud
   • CBy automatically responding to security incidents without human intervention
   • DBy providing a graphical interface for security monitoring
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which encryption technique is commonly used to protect data while it is being transmitted over the internet?

   • ATokenization
   • BAES-256 at rest
   • CHashing with SHA-256
   • DTLS (Transport Layer Security)
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A software company uses open-source libraries in their applications. They want to ensure that the libraries are authentic and have not been tampered with. What should they implement?

   • AUse a network firewall to restrict access to the internet.
   • BUse a software composition analysis tool that checks library hashes against a trusted database and verifies digital signatures.
   • CEncrypt the libraries when storing them in a repository.
   • DRegularly update the libraries to the latest versions.
   Reveal Solution Discussion Select an answer first