NSE NSE Cloud Security & Virtualization 3

Question 1

What is 'lateral movement' in the context of a cloud environment compromise?

Accepted Answer

An attacker who has compromised one cloud resource using that access to pivot and compromise additional resources

Answer

After initial compromise of one cloud resource, an attacker uses its credentials and network access to move laterally into other services, accounts, or roles.

Question 2

Which security framework is specifically designed to address adversary tactics and techniques targeting cloud environments?

Accepted Answer

MITRE ATT&CK for Cloud

Answer

MITRE ATT&CK for Cloud maps specific adversary tactics and techniques observed against cloud platforms like AWS, Azure, and GCP to help defenders detect and respond.

Question 3

What does a hypervisor type-1 (bare-metal) differ from a type-2 (hosted) hypervisor in terms of security?

Accepted Answer

Type-1 hypervisors run directly on hardware with no host OS layer, reducing attack surface compared to type-2

Answer

Type-1 bare-metal hypervisors eliminate the host OS layer present in type-2, reducing the attack surface and potential privilege escalation paths to the hardware.

Question 4

Which practice helps prevent 'noisy neighbor' security issues in shared cloud infrastructure?

Accepted Answer

Using dedicated instances or physical host isolation for sensitive workloads

Answer

Dedicated hosts or instances ensure sensitive workloads do not share physical processors or memory with potentially hostile or compromised neighboring tenants.

Question 5

In cloud identity security, what is the risk posed by long-lived, unused IAM access keys that are never rotated?

Accepted Answer

They provide a persistent backdoor if stolen, as they never expire and may not be monitored

Answer

Stale, unrotated IAM access keys that are stolen give attackers indefinite access since there is no expiration, and low usage may mean the compromise goes undetected.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE NSE Cloud Security & Virtualization 3