4.1 Identify and Describe Major Cloud Architectures and Topologies CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is using a cloud provider's managed Kubernetes service. They are responsible for the worker nodes' guest OS, but the provider manages the control plane. Which service model does this represent?

   • ASoftware as a Service (SaaS)
   • BInfrastructure as a Service (IaaS)
   • CFunction as a Service (FaaS)
   • DPlatform as a Service (PaaS)
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is moving a sensitive application from an on-premises data center to a public cloud IaaS environment. They are concerned about the increased attack surface. Which factor is the most significant contributor to the increased attack surface in the public cloud?

   • AThe customer has less control over the hypervisor
   • BThe provider is responsible for physical security
   • CThe application is now reachable from the internet by default
   • DThe provider manages the virtual network
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A cloud administrator is setting up a new VPC. They need to host a public-facing web server and a backend database that should not be accessible from the internet. What is the minimal correct topology?

   • AOne public subnet for the web server and one private subnet for the database, with a route from the private subnet to the internet for updates
   • BOne subnet for both the web server and the database, with a network ACL allowing only port 443
   • COne private subnet for the web server and one public subnet for the database
   • DTwo public subnets, one for the web server and one for the database, with a firewall rule blocking inbound traffic to the database
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A financial services firm must run a workload that processes sensitive customer data. Regulatory requirements mandate that the underlying infrastructure be physically dedicated to their organization, and they require the highest level of control over hardware configuration. Which deployment model is most appropriate?

   • APrivate cloud
   • BHybrid cloud
   • CPublic cloud
   • DCommunity cloud
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is using a cloud provider's serverless function service (FaaS) to run a data-processing job. The function reads from a cloud storage bucket and writes to a cloud database. Under the shared responsibility model, which security control is the customer responsible for?

   • APatching the runtime environment of the function
   • BConfiguring the network firewall for the function's execution environment
   • CSecuring the application code and the data stored in the storage bucket and database
   • DManaging the underlying servers that execute the function
   Reveal Solution Discussion Select an answer first