CSS Cloud Security & Infrastructure Protection 3

Question 1

Which framework was specifically designed to address cloud computing security controls?

Accepted Answer

CSA Cloud Controls Matrix (CCM)

Answer

HIPAA Security Rule

Answer

PCI-DSS v4.0

Answer

NIST SP 800-53

Question 2

What does FedRAMP primarily govern?

Accepted Answer

Security requirements for cloud services used by U.S. federal government agencies

Answer

Financial data security requirements for cloud-based payment processors

Answer

International cloud data transfer agreements between allied nations

Answer

Healthcare data protection standards for cloud-hosted patient records

Question 3

Which principle best describes 'zero trust' architecture as applied to cloud environments?

Accepted Answer

Never implicitly trusting any user, device, or network segment regardless of location

Answer

Trusting all users and devices connected to the internal corporate network

Answer

Completely delegating all security decisions to the cloud provider

Answer

Allowing unrestricted traffic between cloud services within the same account

Question 4

What is a key security consideration when cloud services process data belonging to EU citizens?

Accepted Answer

GDPR compliance requirements including data subject rights and cross-border transfer restrictions

Answer

The data must be stored exclusively on U.S.-based servers to meet export controls

Answer

The data must be encrypted using only EU government-approved cryptographic algorithms

Answer

Cloud providers must obtain annual security certification directly from the European Commission

Question 5

From a security perspective, what does a Service Level Agreement (SLA) with a cloud provider typically address?

Accepted Answer

Guaranteed uptime commitments, incident response timelines, and division of security responsibilities

Answer

The maximum number of concurrent users permitted on the platform

Answer

The specific encryption algorithms the provider will use to protect customer data

Answer

The number of certified security staff the provider is required to employ

Question 6

What is the significance of a 'right to audit' clause in a cloud service contract?

Accepted Answer

It gives the customer the contractual right to audit the cloud provider's security controls and compliance posture

Answer

It authorizes cloud providers to audit customer security practices and charge for findings

Answer

It requires independent third-party auditors to review all cloud financial transactions quarterly

Answer

It mandates government regulatory agencies to conduct annual audits of the cloud provider

Question 7

Which security control is MOST effective at preventing unauthorized data exfiltration from a cloud storage service?

Accepted Answer

Implementing data loss prevention (DLP) policies with egress monitoring and blocking

Answer

Enabling versioning on all cloud storage buckets

Answer

Requiring all cloud users to complete annual security awareness training

Answer

Storing all cloud data in an encrypted format using provider-managed keys