CCSP Cloud Platform and Infrastructure Security 2

Question 1

What is the purpose of a bastion host (jump server) in cloud infrastructure security?

Accepted Answer

To provide a hardened, monitored single entry point for administrative access to private network resources

Answer

To load balance traffic across multiple servers

Answer

To encrypt all traffic within the VPC

Answer

To store encryption keys for cloud resources

Question 2

Which cloud service model places the MOST infrastructure security responsibility on the cloud customer?

Accepted Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 3

What is a security group in AWS cloud infrastructure?

Accepted Answer

A virtual stateful firewall that controls inbound and outbound traffic for cloud instances

Answer

A group of IAM users with shared permissions

Answer

A compliance framework grouping

Answer

A collection of encryption keys managed together

Question 4

What does the principle of immutable infrastructure mean in cloud security?

Accepted Answer

Servers are never modified after deployment; changes are made by replacing instances with new ones

Answer

Infrastructure that cannot be encrypted

Answer

Infrastructure that is always available with 100% uptime

Answer

Cloud resources that cannot be deleted

Question 5

Which attack targets the management plane of a cloud environment to gain control over provisioning and configuration?

Accepted Answer

Cloud management plane attack / API abuse

Answer

SQL injection

Answer

Cross-site scripting (XSS)

Answer

DNS poisoning

Question 6

What is the main purpose of a Cloud Access Security Broker (CASB)?

Accepted Answer

To act as an intermediary that enforces security policies between cloud users and cloud services

Answer

To replace the cloud provider's built-in firewall

Answer

To provide multi-factor authentication to cloud portals

Answer

To encrypt data before it reaches the cloud provider