704.1 Cloud Native Security (weight: 4) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   Which practice is most effective for preventing vulnerable container images from being deployed to a Kubernetes cluster?

   • AUsing a strong admin password for the cluster
   • BEnabling network policies
   • CRestricting pod-to-pod communication
   • DScanning images for vulnerabilities before deployment
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following is a common threat specific to cloud environments that involves unauthorized access to a customer's data due to misconfigured storage?

   • AMan-in-the-middle attack
   • BData exposure via misconfigured bucket
   • CDDoS attack
   • DSQL injection
   Reveal Solution Discussion Select an answer first
3. 33application · medium

   A DevOps team wants to detect unauthorized access attempts to their cloud resources. They need to be alerted when someone tries to access a resource without proper permissions. What should they implement?

   • AUse a cloud IAM policy that denies all access to resources by default.
   • BEnable cloud audit logging and set up a monitoring alert that triggers on 'access denied' events.
   • CEnable cloud monitoring for CPU utilization and set up an alert for high usage.
   • DConfigure a security group to block all inbound traffic from unknown IP addresses.
   Reveal Solution Discussion Select an answer first