CCSP Cloud Platform and Infrastructure Security

Question 1

Which cloud infrastructure component acts as a logical boundary to isolate resources between different tenants or business units?

Accepted Answer

Virtual Private Cloud (VPC)

Answer

Content Delivery Network (CDN)

Answer

Load Balancer

Answer

API Gateway

Question 2

What is the primary security concern with a hypervisor in a multi-tenant cloud environment?

Accepted Answer

A compromised hypervisor can expose all guest VMs running on that host

Answer

Hypervisors cannot support encrypted VMs

Answer

Hypervisors increase network latency significantly

Answer

Hypervisors prevent the use of firewalls

Question 3

What does the term 'VM sprawl' refer to in cloud environments?

Accepted Answer

The uncontrolled proliferation of virtual machine instances that increases attack surface and management overhead

Answer

Virtual machines consuming excessive CPU

Answer

VMs replicating across too many regions

Answer

VMs with outdated operating systems

Question 4

Which network security control is typically used at the boundary of a cloud VPC to filter inbound and outbound traffic?

Accepted Answer

Security Group / Network Access Control List (NACL)

Answer

Intrusion Prevention System (IPS)

Answer

Web Application Firewall (WAF)

Answer

Data Loss Prevention (DLP)

Question 5

What is a key security risk of using shared storage in a multi-tenant cloud environment?

Accepted Answer

Data remnance — residual data from one tenant being accessible to another

Answer

Increased latency

Answer

Higher cost

Answer

Reduced redundancy

Question 6

In cloud infrastructure, what is infrastructure as code (IaC) primarily used for?

Accepted Answer

Provisioning and managing infrastructure through machine-readable configuration files

Answer

Writing application source code for cloud-native apps

Answer

Monitoring cloud resource performance

Answer

Billing and cost management