4.2 Identify and Describe Major Challenges Related to Cloud Security CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company uses a multi-cloud environment with resources in AWS and Azure. The security team is concerned about the lack of a centralized view of security configurations across both clouds. They also suspect that some resources are not compliant with internal policies. Which cloud security challenge is the team most likely experiencing?

   • AContainer escape during runtime
   • BInsecure APIs in cloud-native applications
   • CMisconfigured web application firewall
   • DLack of visibility into cloud infrastructure
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security auditor is reviewing a company's cloud environment and finds that several virtual machines have been deployed with default credentials and open management ports. The auditor also notices that the company has not enabled logging for these resources. Which two cloud security challenges are most directly illustrated by these findings?

   • AInsecure APIs and container escape
   • BUnauthorized runtime access and compliance violation
   • CVulnerabilities in cloud-native applications and misconfigured WAF
   • DMisconfigurations and lack of visibility
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is migrating to the cloud and wants to ensure that its security team has a complete view of all cloud resources and their configurations. The team also needs to detect and respond to runtime threats. Which combination of tools would best meet these needs?

   • AA cloud security posture management (CSPM) tool and a cloud workload protection platform (CWPP)
   • BA cloud access security broker (CASB) and a data loss prevention (DLP) tool
   • CA web application firewall (WAF) and an API gateway
   • DA security information and event management (SIEM) system and a vulnerability scanner
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company recently migrated a customer-facing web application to a cloud provider. The security team discovers that the application's API endpoints are publicly accessible and lack authentication, allowing anyone to retrieve sensitive customer data. The team also notices that the cloud provider's default security groups are overly permissive. Which two major cloud security challenges are most directly illustrated by this scenario?

   • AContainer escape and runtime privilege escalation
   • BCompliance violation and lack of visibility
   • CInsecure APIs and cloud misconfiguration
   • DDDoS attack and data exfiltration
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's cloud-native application consists of several microservices that communicate via APIs. The security team discovers that one microservice has a known critical vulnerability that could allow remote code execution. The team also finds that the microservice is running with elevated privileges. Which two cloud security challenges are most directly illustrated by this scenario?

   • AVulnerabilities in cloud-native applications and runtime privilege escalation
   • BContainer escape and unauthorized access
   • CInsecure API and compliance violation
   • DMisconfigured WAF and lack of visibility
   Reveal Solution Discussion Select an answer first