4.2 Identify and Describe Major Challenges Related to Cloud Security CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is developing a cloud-native application that uses many APIs. The security team wants to ensure that the APIs are secure, but they also need to maintain a fast development pace. They are considering using a web application firewall (WAF) and API gateway. Which approach best balances security and development speed?

   • ARely solely on the cloud provider's default API security features
   • BDisable the WAF to avoid false positives that could block legitimate traffic
   • CDeploy an API gateway with built-in security policies and rate limiting, and integrate with a WAF for additional protection
   • DRequire developers to manually implement security checks in each microservice
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company runs a critical application in a Kubernetes cluster in the cloud. The security team receives an alert that a pod is behaving abnormally, attempting to access sensitive files on the host. The team suspects that an attacker has exploited a vulnerability in the application to gain code execution inside the pod. Which cloud security challenge is this an example of?

   • ACompliance violation
   • BMisconfigured network security group
   • CInsecure API in the application
   • DThreats to running workloads
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company uses a multi-cloud environment and is struggling to maintain a consistent security posture. The security team finds that some resources are misconfigured, and there is no centralized logging. They also discover that a containerized workload was compromised due to a vulnerability in a third-party library. Which combination of cloud security challenges does this scenario illustrate?

   • AContainer escape, compliance violation, and insecure API
   • BUnauthorized runtime access, misconfigured WAF, and lack of visibility
   • CMisconfigurations, lack of visibility, and vulnerabilities in cloud-native applications
   • DInsecure APIs, container escape, and compliance violation
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst is investigating an alert about a containerized workload running in a cloud environment. The analyst finds that an attacker exploited a vulnerability in the container runtime to gain access to the host operating system. From there, the attacker accessed other containers running on the same host. Which cloud security challenge does this incident primarily demonstrate?

   • ACloud runtime security challenge, specifically a container escape
   • BApplication security challenge, specifically an insecure API
   • CCloud posture security challenge, specifically a misconfigured identity policy
   • DCloud posture security challenge, specifically a compliance violation
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A security team detects that a threat actor has exploited a vulnerability in a containerized application to gain access to the host operating system. This is an example of which cloud runtime security challenge?

   • ACompliance violation
   • BMisconfiguration
   • CInsecure APIs
   • DContainer escape
   Reveal Solution Discussion Select an answer first