Cyber Security Cloud Security 2

Question 1

What is a cloud access security broker (CASB)?

Accepted Answer

A security tool that monitors and enforces policies for cloud service access

Answer

A CASB sits between users and cloud services to enforce security policies, provide visibility, and prevent data leakage.

Question 2

What is the primary risk of using the root account in AWS for daily operations?

Accepted Answer

Root account has unrestricted access to all resources, making compromise catastrophic

Answer

The root account has unlimited privileges including closing the account, making it a high-value target that should rarely be used.

Question 3

What does a Virtual Private Cloud (VPC) provide in cloud environments?

Accepted Answer

An isolated network environment within the cloud for deploying resources

Answer

A VPC provides an isolated, logically defined network in the cloud where you control IP ranges, subnets, and routing.

Question 4

What is infrastructure as code (IaC) security scanning used to detect?

Accepted Answer

Misconfigurations in Terraform or CloudFormation templates before deployment

Answer

IaC security scanning analyzes templates like Terraform or CloudFormation to find misconfigurations before they reach production.

Question 5

Which attack targets cloud metadata services to steal temporary credentials?

Accepted Answer

Server-Side Request Forgery (SSRF) targeting the instance metadata service

Answer

SSRF can trick cloud applications into querying the instance metadata service (e.g., 169.254.169.254) to retrieve IAM credentials.

Cyber Security Practice Test