In a cloud VPC, what is the primary function of a security group?

To provide a static public IP address for resources

To act as a stateful firewall that controls inbound and outbound traffic for associated resources

To route traffic between subnets

To encrypt traffic between instances

What is the primary purpose of an audit trail in cloud security?

To automatically block malicious traffic

To provide a chronological record of actions and events for accountability and investigation

A company uses a CI/CD pipeline to build and deploy applications. They want to ensure that the artifacts used in the pipeline are authentic and have not been tampered with. They also need to protect the pipeline from unauthorized access. What should they implement?

Use a VPN to connect to the pipeline and rely on the VPN's authentication.

Encrypt the artifacts and store the encryption keys in the pipeline configuration.

Use a checksum to verify the artifacts and store them in a private repository.

Sign the artifacts with a private key and verify the signature in the pipeline, and use IAM roles to restrict access to the pipeline resources.

A DevOps team wants to automatically remediate security misconfigurations in their cloud infrastructure. They use infrastructure as code to manage their resources. What should they implement?

Use a cloud security group to block access to misconfigured resources.

Use a policy-as-code tool that scans the infrastructure code for misconfigurations and automatically applies fixes.

Set up a monitoring alert that notifies the team of misconfigurations.

Manually review the infrastructure code before each deployment.

In cloud incident response, why is forensic analysis often more challenging than in on-premises environments?

Because cloud environments do not support forensic tools

Because cloud providers always delete all logs

Because cloud resources may be ephemeral and data may be automatically deleted

Because cloud incidents are always caused by the provider

LPI DevOps Tools Engineer

Domain 4Objective 1

704.1 Cloud Native Security (weight: 4) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 4)

Part of the 704 Security and Observability domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

Questions 16–20

16foundation · easy
In a cloud VPC, what is the primary function of a security group?
Select an answer first
17foundation · easy
What is the primary purpose of an audit trail in cloud security?
Select an answer first
18expert · hard
A company uses a CI/CD pipeline to build and deploy applications. They want to ensure that the artifacts used in the pipeline are authentic and have not been tampered with. They also need to protect the pipeline from unauthorized access. What should they implement?
Select an answer first
19application · medium
A DevOps team wants to automatically remediate security misconfigurations in their cloud infrastructure. They use infrastructure as code to manage their resources. What should they implement?
Select an answer first
20foundation · easy
In cloud incident response, why is forensic analysis often more challenging than in on-premises environments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DEVOPS-TOOLS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “DEVOPS-TOOLS-ENGINEER” is a trademark of its owner, used for identification only.