3.3 Explain the Creation and Configuration of Cloud Security Rules and Policies (e.g., Attack Path, Configuration, Data, Identity, Network Exposure, AI) CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of AI security rules and policies in cloud posture security?

   • ATo manage the cost of AI workloads in the cloud
   • BTo ensure that AI models are always available and performant
   • CTo replace traditional security rules for non-AI resources
   • DTo address security risks specific to AI workloads and models, such as data poisoning and model theft
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When creating an attack path rule, which of the following elements is typically included in the rule definition?

   • AA list of users who are allowed to access the cloud console
   • BA list of allowed IP addresses for inbound traffic
   • CA set of conditions that define a risky combination of resources, permissions, and exposures
   • DA schedule for when the rule should be evaluated
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the purpose of a configuration rule in cloud posture security?

   • ATo detect and respond to active security threats in real time
   • BTo enforce secure configuration standards for cloud resources, such as requiring encryption for storage accounts
   • CTo manage user identities and their permissions
   • DTo monitor network traffic between virtual machines
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary focus of data security rules and policies in cloud posture security?

   • AMonitoring network traffic to detect data exfiltration
   • BEnsuring that all cloud resources are backed up regularly
   • CProtecting data through classification, encryption, and access controls
   • DManaging user identities and their permissions to cloud resources
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A cloud security team must enforce a policy that all storage accounts in the production subscription have 'Secure transfer required' enabled. They want to automatically remediate any non-compliant storage account that is created. The team uses a cloud security posture management (CSPM) tool that supports policy-driven remediation. Which configuration should the team implement?

   • ACreate an alert rule that notifies the security team when a storage account is created without 'Secure transfer required' enabled.
   • BCreate a configuration policy that checks the 'Secure transfer required' setting and configure an automatic remediation action to enable it.
   • CManually review all storage accounts on a weekly basis and enable the setting if it is disabled.
   • DCreate a network exposure rule that blocks public access to storage accounts.
   Reveal Solution Discussion Select an answer first