Cloud Security Fundamentals Flashcards

What is the primary security concern when using public cloud storage services for sensitive business documents?

Answer: Data may be accessed by unauthorized parties if not properly encrypted

Public cloud storage can expose sensitive data if proper encryption and access controls are not implemented, as data travels through and resides on third-party infrastructure.

Which cloud deployment model provides dedicated infrastructure for a single organization?

Answer: Private cloud

A private cloud is dedicated to a single organization, providing greater control over security, compliance, and customization of the infrastructure.

What does the shared responsibility model in cloud computing define?

Answer: The division of security obligations between the cloud provider and the customer

The shared responsibility model clarifies which security tasks the cloud provider handles (such as physical security and infrastructure) and which the customer must manage (such as data encryption and access controls).

Which practice helps prevent unauthorized access to cloud-based accounts?

Answer: Enabling multi-factor authentication (MFA)

Multi-factor authentication adds an additional verification step beyond a password, significantly reducing the risk of unauthorized access even if credentials are compromised.

What is a key risk associated with shadow IT in cloud computing?

Answer: Employees using unapproved cloud services that bypass security policies

Shadow IT occurs when employees use unauthorized cloud applications without IT department approval, creating security blind spots and potential data leaks outside the organization's security controls.

What type of cloud attack involves intercepting data transmitted between the user and the cloud service?

Answer: Man-in-the-middle attack

A man-in-the-middle (MITM) attack intercepts communications between a user and a cloud service, allowing the attacker to eavesdrop on or alter the data being transmitted.