Security Issues in a Hybrid Cloud Environment CERTIFIED-HYBRID-CLOUD-IMPLEMENTATION-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which practice is most likely to lead to a policy violation in a hybrid cloud environment?

   • ARestricting administrative access to a limited set of users
   • BAllowing developers to create cloud resources without approval
   • CApplying security patches to all virtual machines on a regular schedule
   • DUsing a central logging solution to collect audit logs from all environments
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A healthcare company stores patient data in Azure Blob Storage and uses Azure Policy to enforce HTTPS for storage accounts. A security audit reveals that some storage accounts allow HTTP access. The policy is assigned to the subscription. What is the most likely reason the policy is not being enforced?

   • AThe storage accounts were created before the policy was assigned and are not compliant.
   • BThe policy is not assigned to the resource group containing the storage accounts.
   • CThe storage accounts are using a different encryption method.
   • DThe storage accounts are in a different Azure region.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A vulnerability scan identifies that a cloud VM is running an outdated operating system with known vulnerabilities. What is the most appropriate remediation action?

   • AMove the VM to a different availability zone
   • BIncrease the VM's memory
   • CApply the latest security patches to the operating system
   • DDisable the VM's network interface
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which component is commonly misconfigured in hybrid cloud network security, leading to unintended access to cloud resources?

   • ALoad balancer health probes
   • BDNS server settings
   • CVirtual machine size
   • DNetwork security group (NSG) rules
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company uses Azure Disk Encryption for VMs. After a security incident, the security team rotates the encryption keys in Azure Key Vault. The VMs continue to run, but the security team notices that the VMs are still using the old keys. What is the most likely cause?

   • AThe VMs are not using Azure Disk Encryption.
   • BThe VMs need to be restarted to use the new keys.
   • CThe new keys are not yet active in Key Vault.
   • DThe key rotation only affects new VMs, not existing ones.
   Reveal Solution Discussion Select an answer first