4.2 Identify and Describe Major Challenges Related to Cloud Security CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A security analyst observes that a running virtual machine is communicating with a known command-and-control server. This activity is an example of which cloud runtime security challenge?

   • AMisconfiguration
   • BUnauthorized access during runtime
   • CLack of visibility
   • DInsecure APIs
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company runs a containerized application in a cloud environment. The security team discovers that an attacker has exploited a vulnerability in the application to escape the container and gain access to the host. The team also finds that the container was running with root privileges and that the host's kernel was outdated. Which combination of cloud security challenges does this incident illustrate?

   • AMisconfigured WAF, insecure API, and container escape
   • BContainer escape, runtime privilege escalation, and misconfiguration
   • CInsecure API, compliance violation, and lack of visibility
   • DUnauthorized runtime access, compliance violation, and misconfigured storage
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is required to comply with a data protection regulation that mandates encryption of data at rest. The security team discovers that several cloud storage buckets are not encrypted. The team also finds that the buckets are publicly accessible. Which cloud security challenge is most directly indicated by these findings?

   • AContainer escape
   • BInsecure APIs
   • CUnauthorized runtime access
   • DCompliance violations and misconfigurations
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   A cloud administrator notices that a storage bucket has been set to 'public' access, exposing sensitive data. This is an example of which cloud posture security challenge?

   • AMisconfiguration
   • BUnauthorized access during runtime
   • CInsecure APIs
   • DContainer escape
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is deploying a new web application that will be publicly accessible. The security team is concerned about application-level attacks such as SQL injection and cross-site scripting. They also need to ensure that the application complies with internal security policies. Which approach best addresses both concerns?

   • AImplement a virtual private network (VPN) for all users
   • BRely on the cloud provider's default security groups
   • CDeploy a web application firewall (WAF) and implement a secure software development lifecycle (SDLC) that includes security testing
   • DUse a cloud access security broker (CASB) to monitor user activity
   Reveal Solution Discussion Select an answer first