4.2 Identify and Describe Major Challenges Related to Cloud Security CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is migrating its on-premises applications to the cloud. The security team is concerned about the 'shared responsibility model' and wants to ensure that they maintain visibility into the security posture of their cloud resources. They also need to detect misconfigurations and compliance violations across multiple cloud accounts. Which approach best addresses these concerns?

   • AUse container security scanning to identify vulnerabilities in container images
   • BRely on the cloud provider's default security monitoring and alerts
   • CImplement a web application firewall (WAF) on all internet-facing applications
   • DDeploy a cloud security posture management (CSPM) tool that provides a centralized dashboard and automated compliance checks
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company has a cloud environment with many workloads, including containers and virtual machines. The security team is concerned about the risk of container escapes and unauthorized access. They also want to ensure that the workloads are configured securely. Which approach best addresses these concerns?

   • AImplement a cloud workload protection platform (CWPP) that provides runtime security, vulnerability management, and configuration monitoring
   • BRely on the cloud provider's default security features
   • CUse a web application firewall (WAF) on all internet-facing applications
   • DDeploy a cloud access security broker (CASB) to control user access
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security analyst is investigating an incident where a cloud workload was accessed by an unauthorized user. The analyst finds that the workload's credentials were stored in a configuration file that was publicly accessible. The analyst also discovers that the workload was not patched for a known vulnerability. Which combination of cloud security challenges does this incident illustrate?

   • AUnauthorized runtime access, misconfiguration, and vulnerabilities in cloud-native applications
   • BContainer escape, misconfigured storage, and insecure API
   • CMisconfigured WAF, lack of visibility, and unauthorized runtime access
   • DInsecure API, container escape, and compliance violation
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A security auditor is unable to get a complete inventory of all cloud resources and their configurations across multiple accounts. This lack of a unified view is an example of which cloud posture security challenge?

   • AContainer escape
   • BMisconfigured web application firewall
   • CInsecure APIs
   • DLack of visibility
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A development team deploys a cloud-native application that uses multiple microservices. The security team reviews the configuration and finds that the web application firewall (WAF) is not enabled on the internet-facing load balancer. Additionally, the team discovers that the application's container images are not scanned for vulnerabilities. Which two major cloud security challenges are most directly addressed by enabling the WAF and scanning container images?

   • AMisconfigured WAF and vulnerabilities in cloud-native applications
   • BInsecure APIs and data exfiltration
   • CContainer escape and unauthorized runtime access
   • DCompliance violations and lack of visibility
   Reveal Solution Discussion Select an answer first