Cloud Security Quiz

Which cloud security approach has gained significant traction in recent years due to its ability to provide fine-grained access control with minimal standing privileges?

• Virtual Private Networks

• Zero Trust Architecture

• Defense-in-Depth

• Network Segmentation

Which technology has emerged as a key component in modern cloud security strategies for ensuring the integrity of container deployments?

• Software-Defined Networking

• Container Image Scanning

• Virtual Machine Encryption

• Web Application Firewalls

Which of the following is considered a best practice for securing cloud infrastructure credentials?

• Storing credentials in environment variables within application code

• Using the same access keys across multiple environments

• Implementing a secrets management service with key rotation

• Sharing admin credentials among team members for convenience

Which security control is MOST effective in preventing lateral movement within cloud environments?

• Multi-factor authentication

• Network segmentation and micro-segmentation

• Data encryption at rest

• Regular security awareness training

Under GDPR, which role is responsible for determining the purposes and means of processing personal data in a cloud environment?

• Data Controller

• Data Processor

• Data Protection Officer

• Compliance Manager

Which of the following is NOT typically a requirement under HIPAA for cloud service providers handling protected health information (PHI)?

• Implementing audit controls

• Providing patients direct access to their data

• Maintaining a security incident procedure

• Executing a Business Associate Agreement

When conducting incident response in a cloud environment, which phase comes immediately after detection?

• Preparation

• Containment

• Eradication

• Recovery

In a shared responsibility model for cloud security, who is typically responsible for responding to a security breach resulting from misconfigured storage permissions?

• The cloud service provider exclusively

• The customer exclusively

• Both the provider and customer equally

• A third-party security vendor

Which capability best illustrates the advantage of AI-powered cloud security solutions over traditional rule-based approaches?

• Ability to analyze access logs

• Detection of previously unknown (zero-day) threats

• Password complexity enforcement

• Implementation of multi-factor authentication

Which of the following is a limitation of current AI implementations in cloud security?

• They cannot analyze encrypted traffic

• They often generate false positives requiring human verification

• They are unable to monitor cloud resources

• They cannot detect common malware patterns