CAP Cloud Security Architecture 3

Question 1

In a multi-tenant cloud environment, which threat involves one tenant accessing another tenant's data or resources?

Accepted Answer

Tenant isolation breach

Answer

A tenant isolation breach occurs when logical or physical boundaries between tenants fail, allowing unauthorized cross-tenant data access.

Question 2

Which NIST publication provides a cloud computing definition and identifies five essential characteristics of cloud computing?

Accepted Answer

NIST SP 800-145

Answer

NIST SP 800-145 defines cloud computing and its five essential characteristics: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service.

Question 3

What is 'data remanence' in the context of cloud decommissioning?

Accepted Answer

Residual data remaining on storage media after deletion

Answer

Data remanence refers to residual data that persists on storage media after deletion, posing a risk when cloud storage is reallocated to other tenants.

Question 4

Which access control model is most suitable for enforcing attribute-based policies in cloud environments?

Accepted Answer

Attribute-Based Access Control (ABAC)

Answer

ABAC evaluates attributes of users, resources, and environment to make access decisions, making it highly flexible for dynamic cloud policies.

Question 5

A company wants to ensure its SaaS vendor meets baseline security requirements. Which document formalizes these security expectations?

Accepted Answer

Security requirements annex or cloud security addendum

Answer

A security requirements annex or cloud security addendum formally documents and enforces the specific security controls expected from a SaaS vendor.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Cloud Security Architecture 3