035_Cloud-specific Vulnerabilities – CompTIA Security+ –

Front

What is a common reason cloud-hosted codebases remain vulnerable?

Back

Unpatched systems with serious vulnerabilities

Front

What percentage of organizations do not use MFA for their cloud consoles?

Back

76%

Front

Why is global accessibility in the public cloud a risk?

Back

It increases exposure to global threats

Front

What kind of attack can exploit unpatched cloud systems?

Back

Remote Code Execution (RCE)

Front

What is a common flaw related to input sanitization in cloud apps?

Back

Cross-Site Scripting (XSS)

Front

What kind of injection attack can lead to cloud data theft?

Back

SQL Injection

Front

What vulnerability was notable for being easy to exploit and severe? Options: BlueKeep, Heartbleed, Log4j, PrintNightmare, WannaCry

Back

Log4j

Front

Why are DoS and DDoS attacks a major concern in the cloud?

Back

Cloud apps are globally accessible

Front

What does Out-of-Bounds Write allow attackers to do?

Back

Access restricted memory

Front

What is one risk of not patching cloud systems?

Back

Vulnerability to critical CVEs