CyberVista Test CyberVista Cloud Security Questions and Answers 2 — Questions and Answers
Question 1: Which of the following is a key security concern unique to containerized environments such as Docker or Kubernetes?
- SQL injection
- Container escape leading to host compromise (Correct answer)
- Cross-site scripting
- ARP spoofing
Correct answer: Container escape leading to host compromise
Container escape vulnerabilities allow a malicious process inside a container to break out and gain access to the underlying host OS.
Question 2: What is the purpose of a Virtual Private Cloud (VPC)?
- To encrypt all data stored in the cloud
- To provide an isolated network segment within a public cloud environment (Correct answer)
- To replace on-premises data centers entirely
- To manage identity federation across cloud providers
Correct answer: To provide an isolated network segment within a public cloud environment
A VPC creates a logically isolated section of the cloud where you can define your own IP ranges, subnets, and routing rules.
Question 3: Which cloud security control helps detect unauthorized changes to cloud resource configurations in near real time?
- Cloud DLP
- Cloud SIEM integration
- Cloud Security Posture Management (CSPM) (Correct answer)
- Cloud WAF
Correct answer: Cloud Security Posture Management (CSPM)
CSPM tools continuously audit cloud configurations against security benchmarks and alert on deviations or misconfigurations.
Question 4: What does data sovereignty mean in the context of cloud security?
- Encrypting data before it leaves the organization
- Ensuring data is subject to the laws of the country where it is stored or processed (Correct answer)
- Maintaining a single copy of data for audit purposes
- Allowing only the data owner to decrypt sensitive information
Correct answer: Ensuring data is subject to the laws of the country where it is stored or processed
Data sovereignty means that data stored in a particular country is governed by that nation's laws, which can affect privacy and compliance requirements.
Question 5: Which cryptographic method is most appropriate for protecting data at rest in cloud storage?
- TLS 1.3
- AES-256 encryption (Correct answer)
- RSA key exchange
- Diffie-Hellman
Correct answer: AES-256 encryption
AES-256 is the standard symmetric encryption algorithm used to protect stored data, balancing strong security with performance.
Question 6: What is the function of an Identity and Access Management (IAM) role in cloud environments?
- It encrypts communication between cloud services
- It grants a set of permissions to cloud resources or services without using long-term credentials (Correct answer)
- It creates virtual network segments within the cloud
- It scans cloud workloads for malware
Correct answer: It grants a set of permissions to cloud resources or services without using long-term credentials
IAM roles provide temporary, scoped permissions to cloud resources or services, eliminating the need to embed static credentials in code or config.
CyberVista Test CyberVista Cloud Security Questions and Answers 2
Which of the following is a key security concern unique to containerized environments such as Docker or Kubernetes?