Cloud Security Fundamentals And Shared Responsibility

What is the primary goal of the 'Principle of Least Privilege' in a cloud environment?

You are configuring a security group in AWS. What is the default behavior for inbound traffic?

In a Google Cloud environment using Cloud SQL, which task remains the customer's responsibility?

Which of the following is a core characteristic of cloud-native security?

You are deploying a workload on Azure and need to ensure that the underlying hardware maintenance is handled by Microsoft. Which aspect of the Shared Responsibility Model does this represent?

When implementing a 'Zero Trust' architecture in cloud, which component is most critical for verifying requests?

You are auditing a cloud environment where a developer has created an S3 bucket with public read access. Under the AWS Shared Responsibility Model, who is responsible for configuring the bucket policy to restrict this access?

In the context of AWS, which tool provides visibility into compliance and configuration drift?

When using Azure Key Vault to store secrets, which entity holds the responsibility for the protection of the underlying hardware security module (HSM)?

Which cloud security concept allows for the rapid restoration of services after a security incident?

Which of the following is a critical step when performing a 'Cloud-Native' threat model?

What is the primary function of a Cloud Security Posture Management (CSPM) tool?

In GCP, what is the primary purpose of 'Organization Policy Service'?

When securing a containerized application, where should you place the primary focus for security?

You are analyzing a security risk in a multi-cloud environment. What is the most significant challenge regarding the Shared Responsibility Model?

Which of the following is a benefit of using 'Identity and Access Management' (IAM) groups?

Which type of encryption should be used to protect data at rest in a cloud storage bucket?

In the context of 'Shared Responsibility', what does the customer typically manage in a SaaS (Software as a Service) offering?

When configuring 'VPC Service Controls' in GCP, what is the main security benefit?

In AWS, what is the best way to grant a temporary role to an external third-party auditor without creating permanent IAM users?

When using 'Infrastructure as Code' (IaC), what is a key security risk if templates are shared publicly?

Which service should you use to monitor for potential unauthorized API calls in your AWS account?

What is the primary function of 'Multi-Factor Authentication' (MFA) in a cloud environment?

Which TWO of the following are examples of customer responsibilities in the AWS Shared Responsibility Model? (Choose two)

Which TWO of the following are primary security benefits of using cloud-native security tools? (Choose two)

Which THREE of the following are pillars of a Zero Trust approach? (Choose three)

Which TWO of the following are common risks associated with misconfigured cloud storage buckets? (Choose two)

Which THREE of the following are required to maintain a secure cloud-native environment? (Choose three)

Which TWO of the following are effective ways to secure access to your cloud management console? (Choose two)

Which TWO of the following are common cloud-native security practices? (Choose two)

Which THREE of the following are critical components of a comprehensive Cloud Security strategy? (Choose three)

A security administrator is evaluating the shared responsibility model for an AWS deployment. Which task remains the sole responsibility of the customer when using Amazon RDS?

You are auditing an Azure environment. You need to ensure that the security of your guest operating systems is maintained. Under the shared responsibility model, what is the customer's primary responsibility for IaaS Virtual Machines?

A security architect is designing a multi-cloud strategy on GCP. Which component must the customer configure to ensure data protection within the shared responsibility model for Google Cloud Storage?

When evaluating Cloud-Native Security Platforms (CNSP), which area is primarily the responsibility of the cloud provider?

You are analyzing a Prisma Cloud deployment to enforce compliance. You discover that a developer has created a public S3 bucket containing sensitive data. Which principle of the cloud security model is being violated?

A company is migrating a legacy application to a containerized environment using Amazon EKS. Under the shared responsibility model, which action must the customer perform to secure the control plane?

A security team is implementing 'Shift Left' security. What is the fundamental shift in responsibility for the development team?

Which THREE of the following tasks are exclusively the responsibility of the cloud provider in a SaaS model?

Which THREE of the following are examples of cloud-native security concepts?