Cloud Security

What is the characteristic of something being made accessible only to authorized parties?

• Integrity

• Confidentiality

• Authenticity

• Availability

Which type of threat agent is an entity capable of carrying out an attack?

• Malicious Service Agent

• Trusted Attacker

• Malicious Insider

• Anonymous Attacker

What type of attack occurs when data being transferred to or within a cloud is passively intercepted by a malicious service agent?

• Denial of Service

• Traffic Eavesdropping

• Insufficient Authorization

• Virtualization Attack

What is the purpose of hashing in cloud security?

• To reduce the risk of DoS attacks

• To manage user identities and access privileges

• To preserve the confidentiality and integrity of data

• To provide evidence of data authenticity and integrity

Which IAM component is used to manage access to AWS resources?

• IAM user

• IAM role

• IAM group

• IAM policy

What is the purpose of an IAM group in AWS Identity and Access Management?

• To manage access to AWS resources

• To grant the same permissions to multiple users

• To provide temporary security credentials

• To define fine-grained access rights

Which type of IAM policy is attached to a resource like an S3 bucket?

• Full access policy

• Read-only policy

• Resource-based policy

• Identity-based policy

What is the purpose of an IAM role in AWS?

• To uniquely associate with one person

• To define fine-grained access rights

• To grant access to specific AWS resources

• To provide temporary security credentials

How does IAM determine permissions for users or applications in AWS?

• By randomly assigning permissions

• By checking if the permission is explicitly denied or allowed

• By implicitly allowing all permissions

• By explicitly denying all permissions

What is the best practice when defining IAM policies in AWS?

• Grant all permissions to all users

• Follow the principle of most privilege

• Follow the principle of least privilege

• Deny all permissions to all users