Security Issues in a Hybrid Cloud Environment CERTIFIED-HYBRID-CLOUD-IMPLEMENTATION-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company uses Azure Security Center to monitor hybrid cloud resources. An alert indicates that a VM in Azure is communicating with a known malicious IP address. The VM is also connected to on-premises via VPN. What is the most likely next step?

   • AReboot the VM to clear the malicious process.
   • BDisconnect the VPN to prevent lateral movement.
   • CIsolate the VM by removing its public IP and blocking outbound traffic in the NSG.
   • DInvestigate the VM's network logs to determine the process and user responsible for the communication.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company uses Azure SQL Database and requires encryption in transit. They have configured the connection string with 'Encrypt=True' and 'TrustServerCertificate=False'. However, some client applications fail to connect with a certificate error. What is the most likely cause?

   • AThe client is using an outdated TLS version.
   • BThe connection string is missing the 'Server' parameter.
   • CThe server certificate is expired.
   • DThe client does not trust the Azure SQL Database certificate.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which vulnerability is particularly associated with hybrid cloud environments due to the expanded attack surface?

   • AInability to patch on-premises operating systems
   • BLack of encryption in transit on the internet
   • CPhysical theft of on-premises servers
   • DMisconfigured cloud storage buckets that expose sensitive data
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company's vulnerability scanner reports that a web application in Azure has a critical vulnerability in the underlying OS. The application is running on a VM. The security team wants to remediate the vulnerability. What is the best action?

   • AApply the latest OS patches to the VM.
   • BRestrict network access to the VM.
   • CAdd a web application firewall (WAF) in front of the VM.
   • DMove the application to Azure App Service.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   While reviewing security logs, an administrator notices multiple failed login attempts from a single IP address followed by a successful login. What does this pattern most likely indicate?

   • AA brute-force attack that succeeded
   • BA network misconfiguration
   • CA normal user behavior
   • DA user who forgot their password
   Reveal Solution Discussion Select an answer first