Cloud Security Fundamentals And Shared Responsibility

Which TWO of the following are primary security benefits of using cloud-native security tools? (Choose two)

Which type of encryption should be used to protect data at rest in a cloud storage bucket?

Which THREE of the following are critical components of a comprehensive Cloud Security strategy? (Choose three)

Which THREE of the following are required to maintain a secure cloud-native environment? (Choose three)

When using Azure Key Vault to store secrets, which entity holds the responsibility for the protection of the underlying hardware security module (HSM)?

You are configuring a security group in AWS. What is the default behavior for inbound traffic?

In the context of 'Shared Responsibility', what does the customer typically manage in a SaaS (Software as a Service) offering?

What is the primary function of a Cloud Security Posture Management (CSPM) tool?

When implementing a 'Zero Trust' architecture in cloud, which component is most critical for verifying requests?

Which of the following is a benefit of using 'Identity and Access Management' (IAM) groups?

You are deploying a workload on Azure and need to ensure that the underlying hardware maintenance is handled by Microsoft. Which aspect of the Shared Responsibility Model does this represent?

Which service should you use to monitor for potential unauthorized API calls in your AWS account?

You are auditing a cloud environment where a developer has created an S3 bucket with public read access. Under the AWS Shared Responsibility Model, who is responsible for configuring the bucket policy to restrict this access?

In a Google Cloud environment using Cloud SQL, which task remains the customer's responsibility?

Which TWO of the following are common risks associated with misconfigured cloud storage buckets? (Choose two)

Which THREE of the following are pillars of a Zero Trust approach? (Choose three)

You are analyzing a security risk in a multi-cloud environment. What is the most significant challenge regarding the Shared Responsibility Model?

Which TWO of the following are common cloud-native security practices? (Choose two)

When securing a containerized application, where should you place the primary focus for security?

A security administrator is evaluating the shared responsibility model for an AWS deployment. Which task remains the sole responsibility of the customer when using Amazon RDS?

When using 'Infrastructure as Code' (IaC), what is a key security risk if templates are shared publicly?

Which THREE of the following are examples of cloud-native security concepts?

Which cloud security concept allows for the rapid restoration of services after a security incident?

A security team is implementing 'Shift Left' security. What is the fundamental shift in responsibility for the development team?

Which TWO of the following are examples of customer responsibilities in the AWS Shared Responsibility Model? (Choose two)

What is the primary goal of the 'Principle of Least Privilege' in a cloud environment?

When evaluating Cloud-Native Security Platforms (CNSP), which area is primarily the responsibility of the cloud provider?

Which of the following is a core characteristic of cloud-native security?

In the context of AWS, which tool provides visibility into compliance and configuration drift?

Which TWO of the following are effective ways to secure access to your cloud management console? (Choose two)

You are analyzing a Prisma Cloud deployment to enforce compliance. You discover that a developer has created a public S3 bucket containing sensitive data. Which principle of the cloud security model is being violated?

You are auditing an Azure environment. You need to ensure that the security of your guest operating systems is maintained. Under the shared responsibility model, what is the customer's primary responsibility for IaaS Virtual Machines?

In AWS, what is the best way to grant a temporary role to an external third-party auditor without creating permanent IAM users?

Which of the following is a critical step when performing a 'Cloud-Native' threat model?

What is the primary function of 'Multi-Factor Authentication' (MFA) in a cloud environment?

Which THREE of the following tasks are exclusively the responsibility of the cloud provider in a SaaS model?

A security architect is designing a multi-cloud strategy on GCP. Which component must the customer configure to ensure data protection within the shared responsibility model for Google Cloud Storage?

When configuring 'VPC Service Controls' in GCP, what is the main security benefit?

A company is migrating a legacy application to a containerized environment using Amazon EKS. Under the shared responsibility model, which action must the customer perform to secure the control plane?

In GCP, what is the primary purpose of 'Organization Policy Service'?