Cyber Security Cloud Security 1 — Questions and Answers
Question 1: What is the Shared Responsibility Model in cloud security?
- The cloud provider is responsible for all security
- Security responsibilities are divided between the cloud provider and the customer depending on the service model (Correct answer)
- Customers own all security controls in the cloud
- Security is the responsibility of the internet service provider
Correct answer: Security responsibilities are divided between the cloud provider and the customer depending on the service model
The shared responsibility model defines what the cloud provider secures (infrastructure) versus what the customer secures (data, apps, access).
Question 2: Which cloud service model gives customers the most control over security configurations?
- SaaS (Software as a Service)
- PaaS (Platform as a Service)
- IaaS (Infrastructure as a Service) (Correct answer)
- FaaS (Function as a Service)
Correct answer: IaaS (Infrastructure as a Service)
IaaS gives customers control over the OS, applications, and network settings, requiring the most security management.
Question 3: What does the principle of least privilege mean in cloud IAM?
- Grant all users admin access to simplify management
- Grant users only the minimum permissions needed to perform their job functions (Correct answer)
- Automatically revoke all permissions after 24 hours
- Require MFA for all cloud API calls
Correct answer: Grant users only the minimum permissions needed to perform their job functions
Least privilege limits the blast radius of compromised accounts by granting only the permissions necessary for a user's role.
Question 4: What is a CSPM (Cloud Security Posture Management) tool used for?
- Encrypting data stored in cloud databases
- Continuously monitoring cloud infrastructure for misconfigurations and compliance violations (Correct answer)
- Managing user identities in multi-cloud environments
- Scanning cloud storage for malware
Correct answer: Continuously monitoring cloud infrastructure for misconfigurations and compliance violations
CSPM tools automatically detect misconfigurations such as public S3 buckets or overly permissive IAM policies.
Question 5: What is a common risk associated with publicly accessible cloud storage buckets?
- Increased latency for cloud applications
- Unintended exposure of sensitive data to anyone on the internet (Correct answer)
- Higher cloud billing costs
- Loss of data due to cloud provider hardware failure
Correct answer: Unintended exposure of sensitive data to anyone on the internet
Public cloud storage buckets can expose sensitive data to the entire internet if access controls are not properly configured.
Question 6: Which security control helps detect unauthorized API calls and configuration changes in AWS?
- AWS Shield
- AWS CloudTrail (Correct answer)
- AWS WAF
- AWS Macie
Correct answer: AWS CloudTrail
AWS CloudTrail logs all API calls and management events, providing an audit trail for security investigations.
Cyber Security Cloud Security 1
What is the Shared Responsibility Model in cloud security?