Governance Risk Compliance And Security

An enterprise is deploying a hybrid cloud model and must ensure that data moving between the on-premises data center and the cloud provider is encrypted. Which mechanism is most appropriate?

A security analyst notices unauthorized changes to cloud infrastructure. Which service should be analyzed to identify which IAM user made the changes?

To ensure that all virtual machines in a cloud environment comply with corporate security standards (e.g., specific OS versions), which tool should be used to enforce configuration policies automatically?

A project manager is reviewing cloud resource usage to ensure compliance with a budget governance policy. Which cloud service dashboard provides the most direct view of current resource costs and budget alerts?

A company is migrating sensitive financial data to AWS and needs to ensure that all data is encrypted at rest using customer-managed keys. Which service should the administrator configure to manage these keys while maintaining audit logs for compliance?

An organization is subject to GDPR and needs to ensure that personal data stored in an Azure SQL Database is protected against unauthorized access. Which feature should be enabled to identify potential vulnerabilities and anomalies?

A cloud architect is defining a security group for a web server. To adhere to the principle of least privilege, which inbound rule should be configured to allow only standard HTTPS traffic?

An auditor requests evidence that an organization is managing cloud risks. Which document should the IT team provide as the primary evidence of risk mitigation strategies?

To meet compliance requirements, a firm must store log files for seven years in a read-only state. Which storage configuration provides this level of immutability?

A company needs to ensure that only authorized devices can access internal cloud applications. Which mechanism verifies device posture before granting access?

A cloud architect needs to ensure that all cloud resources are tagged with an 'Owner' and 'Environment' tag for governance. Which service helps automate the detection and remediation of non-compliant resources?

Which cloud computing concept best describes the ability to add and remove resources based on traffic demands to maintain performance?

After a security incident, it is discovered that a S3 bucket was publicly accessible. Which feature should be used to prevent this from happening in the future?

To comply with data sovereignty laws, a database must remain within a specific country's borders. Which architectural strategy ensures this?

A developer is writing code that accesses an API key. Instead of hardcoding the key, which service should they use to retrieve it securely at runtime?

When following the Shared Responsibility Model, which security aspect is the customer's responsibility in an IaaS environment?

To ensure that all data is encrypted before being sent to the cloud, which encryption method should the organization employ?

A company is conducting a risk assessment and needs to determine the impact of a potential cloud service provider outage. Which document provides the provider's commitment to uptime?

An administrator needs to implement a centralized logging solution for multiple cloud accounts. Which service allows for aggregating security logs into a single security account?

An organization wants to implement an Identity Provider (IdP) to allow employees to use their corporate credentials for cloud logins. Which protocol is typically used for this purpose?

A security engineer is setting up a Web Application Firewall (WAF) to protect a public-facing application. Which feature is most effective against common SQL injection attacks?

Which IAM entity should be created to delegate temporary access to a third-party service provider without sharing long-term credentials?

To ensure that no single administrator has full control over the environment, which security practice should be implemented?

A company is evaluating the risk of moving to the cloud. Which business driver is most relevant to 'Agility' in a cloud adoption context?

A company is using a SaaS application for email. Which part of the security responsibility remains with the company?

An administrator needs to ensure that only authorized traffic enters a private subnet. Which network component should be configured as a first line of defense?

A compliance officer needs to generate a report showing all instances that are not compliant with a standard CIS benchmark. Which service should be used?

What is the primary risk mitigation strategy when storing data in a single availability zone?

A firm must perform a third-party security audit. What type of document should they obtain from the cloud provider to prove compliance with ISO 27001?

Which THREE of the following are common benefits of adopting a Cloud Governance framework?

When a data breach occurs in a cloud environment, who is responsible for notifying the regulatory authorities?

Which TWO of the following are essential components of a Cloud Security Policy?

Which TWO of the following are key responsibilities of a Cloud Governance Committee?

Which THREE of the following represent common compliance risks in a cloud environment?

Which THREE of the following tools or methods are used to secure data in transit in the cloud?

Which TWO of the following scenarios represent a breach of the Shared Responsibility Model?

Which THREE of the following are effective methods for mitigating risks associated with cloud adoption?

Which TWO of the following are key steps in a Cloud Incident Response process?

Which THREE of the following are valid reasons for establishing a Cloud Center of Excellence (CCoE)?

Which TWO of the following are common threats to cloud-based data integrity?

Which THREE of the following are cloud security best practices?

Which TWO of the following are benefits of using Infrastructure as Code (IaC) for compliance?

Which THREE of the following are characteristics of a 'Defense in Depth' security strategy?