CSCU - Certified Secure Computer User Cloud Security Fundamentals Questions and Answers

Question 1

A user signs up for a web-based email service.
They are only responsible for managing their own login credentials and the data within their emails.
The provider handles all server maintenance, software updates, and infrastructure security.
Which cloud service model does this scenario represent?

Accepted Answer

Software as a Service (SaaS)

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Network as a Service (NaaS)

Question 2

According to the shared responsibility model for cloud security, which of the following is almost always the user's responsibility, regardless of the service model (IaaS, PaaS, or SaaS)?

Accepted Answer

Securing and managing their own data and access credentials

Answer

Patching the server's operating system

Answer

Configuring the physical firewall of the data center

Answer

Maintaining the virtualization software (hypervisor)

Question 3

A user uploads a folder of photos to a cloud storage service. To share a single photo with a friend, they right-click the entire folder and set its permissions to 'Public'. What is the MOST significant security risk of this action?

Accepted Answer

All photos in the folder are now potentially exposed to anyone on the internet.

Answer

The friend might accidentally delete the entire folder.

Answer

The cloud provider may charge extra fees for public folders.

Answer

The quality of the photos in the folder will be automatically reduced.

Question 4

Which of the following is a primary security advantage of using a major cloud service provider for data storage compared to storing files solely on a personal external hard drive?

Accepted Answer

It provides professional security management and geographic data redundancy.

Answer

It prevents the user's account from being targeted by phishing attacks.

Answer

It guarantees that the user will never accidentally delete a file.

Answer

It eliminates the need for the user to have a strong password.

Question 5

A small business subscribes to an Infrastructure as a Service (IaaS) provider to host a virtual server for its website. A critical vulnerability is discovered in the server's operating system. According to the shared responsibility model, who is responsible for applying the security patch?

Accepted Answer

The small business (the customer) is responsible.

Answer

The cloud provider is solely responsible.

Answer

The internet service provider is responsible.

Answer

The responsibility is shared equally between the customer and provider.

Question 6

A user synchronizes the 'Documents' folder from their laptop to a cloud storage service. Later, their laptop is infected with ransomware, which encrypts all the files in the 'Documents' folder. What is the MOST likely immediate outcome for the files in the cloud?

Accepted Answer

The encrypted versions of the files will be synchronized, overwriting the clean copies in the cloud.

Answer

The cloud service will automatically restore the previous, unencrypted versions.

Answer

The cloud's built-in antivirus will delete the ransomware and clean the files.

Answer

The files in the cloud will remain unaffected because they are remote.

A user signs up for a web-based email service.They are only responsible for managing their own login credentials and the data within their emails.The provider handles all server maintenance, software updates, and infrastructure security.Which cloud service model does this scenario represent?

A user signs up for a web-based email service.
They are only responsible for managing their own login credentials and the data within their emails.
The provider handles all server maintenance, software updates, and infrastructure security.
Which cloud service model does this scenario represent?