Practice Test GeeksCyberVista Test Practice Test
← All CyberVista Test Flashcard Decks

CyberVista Cloud Security Questions and Answers Flashcards

6 cards from real CyberVista Test practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 CyberVista Cloud Security Questions and Answers flashcards as text

  1. Which type of cloud attack involves an attacker gaining access to a cloud management console through stolen credentials to provision malicious resources?

    Answer: Cloud account hijacking

    Cloud account hijacking occurs when attackers steal cloud credentials and use them to abuse management consoles to spin up cryptomining or exfiltrate data.

  2. What is serverless computing from a security perspective?

    Answer: A model where the provider manages all OS patching and the customer focuses on function-level code security

    In serverless (FaaS) environments, the cloud provider abstracts the OS and runtime, but customers remain responsible for their function code and configurations.

  3. What is the principle of least privilege as applied to cloud IAM?

    Answer: Users and services are granted only the minimum permissions necessary for their specific tasks

    Least privilege in cloud IAM ensures that each identity has only the permissions it needs, minimizing the blast radius of compromised credentials.

  4. What security concern does a Cloud Workload Protection Platform (CWPP) primarily address?

    Answer: Protecting running workloads such as VMs, containers, and serverless functions from runtime threats

    CWPPs provide runtime protection, vulnerability scanning, and micro-segmentation for cloud workloads regardless of where they run.

  5. Which log source is most useful for auditing API calls and administrative actions in a cloud environment?

    Answer: Cloud provider audit logs (e.g., AWS CloudTrail, Azure Activity Log)

    Cloud audit logs record every API call, configuration change, and administrative action, making them essential for forensic investigation and compliance.

  6. What is the primary risk of using public APIs without authentication in a cloud-hosted application?

    Answer: Unauthorized parties can query, modify, or delete application data

    Unauthenticated public APIs allow any internet user to interact with backend services, potentially exposing or corrupting sensitive data.