CSS Cloud Security & Infrastructure Protection 2

Question 1

What is the recommended approach for managing privileged access in cloud environments?

Accepted Answer

Implementing just-in-time (JIT) access with least privilege principles

Answer

JIT access grants elevated permissions only when operationally required and for a limited duration, minimizing the attack surface while adhering to least privilege.

Question 2

What security vulnerability is MOST associated with serverless (Function as a Service) architectures?

Accepted Answer

Event-data injection attacks via malicious data passed through function triggers

Answer

Serverless functions are triggered by events that can carry attacker-controlled data, making input validation against injection attacks a critical security concern.

Question 3

Which control best addresses the risk of a cloud provider outage disrupting business operations?

Accepted Answer

Implementing multi-cloud or hybrid cloud redundancy strategies

Answer

Distributing workloads across multiple cloud providers or a hybrid environment eliminates single-provider dependency and improves resilience against outages.

Question 4

What is Infrastructure as Code (IaC) security scanning?

Accepted Answer

Analyzing IaC templates such as Terraform or CloudFormation for misconfigurations before deployment

Answer

IaC security scanning detects security misconfigurations in infrastructure templates before they are deployed, enabling shift-left security and preventing issues from reaching production.

Question 5

Which encryption protocol version is considered best practice for protecting data in transit within cloud environments?

Accepted Answer

TLS 1.2 or higher for all cloud communications

Answer

TLS 1.2 and TLS 1.3 are the current industry standards for securing data in transit; earlier versions contain known vulnerabilities and should not be used.

(CSS) Certified Security Sentinel Practice Test

(CSS) Certified Security Sentinel Practice Test

CSS Cloud Security & Infrastructure Protection 2