CloudSec-Pro Quick Quiz — 10 Questions

Question 1

What is the primary function of a Cloud Security Posture Management (CSPM) tool?

Accepted Answer

To detect and remediate configuration drift. CSPM tools are designed to continuously monitor cloud environments to detect and remediate configuration risks and compliance violations.

Answer

To manage employee identity lifecycle

Answer

To perform deep packet inspection of encrypted traffic

Answer

To block DDoS attacks

Question 2

What is the primary goal of the 'Principle of Least Privilege' in a cloud environment?

Accepted Answer

To minimize the attack surface by limiting permissions. Least privilege ensures that users and services have only the minimum permissions necessary to perform their tasks, reducing the blast radius of a credential compromise.

Answer

To automate the revocation of keys

Answer

To reduce the number of IAM users

Answer

To increase the complexity of password requirements

Question 3

Which of the following is a benefit of using 'Identity and Access Management' (IAM) groups?

Accepted Answer

To simplify permission management for multiple users. IAM groups allow for the efficient management of permissions for a collection of users with similar job functions.

Answer

To encrypt user passwords

Answer

To provide physical access to the cloud

Answer

To prevent unauthorized login attempts

Question 4

In a Google Cloud environment using Cloud SQL, which task remains the customer's responsibility?

Accepted Answer

Database user access control. While Google manages the underlying OS and database software patching, the customer is responsible for managing database user permissions and access control.

Answer

Physical datacenter security

Answer

Host operating system hardening

Answer

Database software patching

Question 5

When using 'Infrastructure as Code' (IaC), what is a key security risk if templates are shared publicly?

Accepted Answer

The templates may include hardcoded secrets or misconfigurations. Publicly shared IaC templates often contain hardcoded credentials or overly permissive security group rules that can lead to immediate compromise.

Answer

Public templates are automatically deleted

Answer

The templates will not compile

Answer

The templates will incur higher costs

Question 6

Which THREE of the following are critical components of a comprehensive Cloud Security strategy? (Choose three)

Accepted Answer

Identity and Access Management. Governance, Identity, and Detection form the foundation of a robust strategy.

Answer

Relying solely on external audits

Answer

Ignoring container-based workloads

Question 7

You are deploying a workload on Azure and need to ensure that the underlying hardware maintenance is handled by Microsoft. Which aspect of the Shared Responsibility Model does this represent?

Accepted Answer

Provider responsibility for physical infrastructure. Hardware maintenance, such as physical server upkeep and datacenter security, falls under Microsoft's responsibility in the IaaS model.

Answer

Shared responsibility for data encryption

Answer

Customer responsibility for OS patching

Answer

Customer responsibility for identity management

Question 8

When using Azure Key Vault to store secrets, which entity holds the responsibility for the protection of the underlying hardware security module (HSM)?

Accepted Answer

Microsoft. While the customer manages the keys and secrets, the underlying physical infrastructure and the HSM management are the responsibility of the cloud provider.

Answer

The Azure Tenant Administrator

Answer

The Customer

Answer

The Security Auditor

Question 9

Which of the following is a critical step when performing a 'Cloud-Native' threat model?

Accepted Answer

Identifying trust boundaries between microservices. Mapping data flows and identifying trust boundaries between microservices is a fundamental step in modern cloud threat modeling.

Answer

Reviewing physical datacenter floor plans

Answer

Updating local workstation antivirus

Answer

Ordering new network hardware

Question 10

Which TWO of the following are common risks associated with misconfigured cloud storage buckets? (Choose two)

Accepted Answer

Regulatory compliance violations. Data breaches and compliance violations are the most significant risks.

Answer

Hardware failure

Answer

Decreased storage performance

Answer

Increased cloud latency