CyberVista Cloud Security Questions and Answers Flashcards

Which of the following is a key security concern unique to containerized environments such as Docker or Kubernetes?

Answer: Container escape leading to host compromise

Container escape vulnerabilities allow a malicious process inside a container to break out and gain access to the underlying host OS.

What is the purpose of a Virtual Private Cloud (VPC)?

Answer: To provide an isolated network segment within a public cloud environment

A VPC creates a logically isolated section of the cloud where you can define your own IP ranges, subnets, and routing rules.

Which cloud security control helps detect unauthorized changes to cloud resource configurations in near real time?

Answer: Cloud Security Posture Management (CSPM)

CSPM tools continuously audit cloud configurations against security benchmarks and alert on deviations or misconfigurations.

What does data sovereignty mean in the context of cloud security?

Answer: Ensuring data is subject to the laws of the country where it is stored or processed

Data sovereignty means that data stored in a particular country is governed by that nation's laws, which can affect privacy and compliance requirements.

Which cryptographic method is most appropriate for protecting data at rest in cloud storage?

Answer: AES-256 encryption

AES-256 is the standard symmetric encryption algorithm used to protect stored data, balancing strong security with performance.

What is the function of an Identity and Access Management (IAM) role in cloud environments?

Answer: It grants a set of permissions to cloud resources or services without using long-term credentials

IAM roles provide temporary, scoped permissions to cloud resources or services, eliminating the need to embed static credentials in code or config.