Cloud Engineer Risk Assessment & Management 2

Question 1

A cloud engineer must quantify the potential financial impact of a data breach affecting 50,000 customer records. Which metric best expresses this as a single dollar figure?

Accepted Answer

Single Loss Expectancy (SLE)

Answer

Single Loss Expectancy (SLE) = Asset Value × Exposure Factor and represents the financial loss from one occurrence of a specific risk event.

Question 2

Which risk treatment option is most appropriate when the cost of mitigating a vulnerability exceeds the value of the asset it protects?

Accepted Answer

Risk acceptance

Answer

Risk acceptance is used when the cost of controls exceeds the potential loss, making it economically rational to tolerate the risk.

Question 3

A company stores sensitive data in AWS S3. A penetration test reveals a misconfigured bucket policy that exposes data publicly. In the risk register, this misconfiguration is classified as:

Accepted Answer

A vulnerability

Answer

A vulnerability is a weakness in a system—here the misconfigured bucket policy—that can be exploited by a threat actor.

Question 4

During a cloud risk assessment, you discover that a third-party SaaS provider has access to your production database. Which risk category does this primarily represent?

Accepted Answer

Supply chain / third-party risk

Answer

Third-party vendor access introduces supply chain risk because the organization's security posture depends on the vendor's controls.

Question 5

Which document formally records identified risks, their likelihood, impact ratings, owners, and treatment plans for a cloud environment?

Accepted Answer

Risk register

Answer

A risk register is the authoritative log that tracks all identified risks along with their assessments, owners, and mitigation status.

Cloud Engineer Practice Test

Cloud Engineer Practice Test

Cloud Engineer Risk Assessment & Management 2