3.1 Identify and Explain the Use of Key Cloud Posture Security Elements CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary function of Data Security Posture Management (DSPM)?

   • AMonitoring user login activity
   • BManaging firewall rules for cloud networks
   • CScanning for vulnerabilities in operating systems
   • DDiscovering, classifying, and protecting sensitive data across cloud and hybrid environments
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of unified compliance management?

   • ATo replace all security controls with a single tool
   • BTo automate the creation of new cloud accounts
   • CTo centralize compliance monitoring and reporting across multiple cloud frameworks and standards
   • DTo provide a firewall for all cloud traffic
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A financial services firm deploys a machine learning model in Azure that processes customer transaction data. The model is trained on a dataset stored in Azure Blob Storage, and the firm must ensure the training data is not tampered with and that the model's outputs remain consistent. They also need to detect if the model is being used in ways that violate internal policies. The security team wants a single solution that covers data integrity, model integrity, and usage monitoring. What should they choose?

   • AA vulnerability management scanner that patches the underlying VMs hosting the ML training environment
   • BA DSPM solution that classifies the training data and restricts access to the Blob Storage container
   • CA CSPM tool that checks for public access on the Blob Storage account and enforces encryption at rest
   • DAn AI-SPM solution that monitors the ML pipeline, validates model versions, and checks for data drift and adversarial inputs
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What does AI Security Posture Management (AI-SPM) primarily manage?

   • ANetwork traffic between cloud regions
   • BSecurity risks associated with AI/ML workloads, including data and model integrity
   • CUser access to cloud consoles
   • DPhysical security of data centers
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company runs a production Kubernetes cluster in EKS. The security team discovers that a developer's service account has cluster-admin permissions, and several pods are running as root with privileged mode enabled. They want to continuously detect and remediate these issues without installing agents on each node. Which approach best addresses the requirement?

   • AEnable AWS Config rules to check for public S3 buckets and overly permissive security groups
   • BConfigure CloudTrail to log all API calls and manually review them quarterly for privilege escalation
   • CInstall a host-based intrusion detection agent on each worker node to monitor container activity
   • DDeploy a KSPM tool that scans the cluster API for RBAC roles, pod security contexts, and admission controller configurations
   Reveal Solution Discussion Select an answer first