035_Cloud-specific Vulnerabilities – CompTIA Security+ –

What is a common reason cloud-hosted codebases remain vulnerable?

• They are air-gapped from the internet

• They only support Linux environments

• They run on blockchain platforms

• They use zero trust architecture

• Unpatched systems with serious vulnerabilities

What percentage of organizations do not use MFA for their cloud consoles?

• 10%

• 25%

• 33%

• 76%

• 91%

Why is global accessibility in the public cloud a risk?

• It breaks encryption by default

• It forces apps to shut down during maintenance

• It increases exposure to global threats

• It limits access to only internal users

• It prevents users from accessing services

What kind of attack can exploit unpatched cloud systems?

• Bluejacking attacks

• Brute force on local printers

• Man-in-the-middle in offline mode

• Physical tampering of routers

• Remote Code Execution (RCE)

What is a common flaw related to input sanitization in cloud apps?

• ARP spoofing

• Cross-Site Scripting (XSS)

• Fileless malware

• Signal jamming

• VPN leakage

What kind of injection attack can lead to cloud data theft?

• Cookie Poisoning

• DNS Tunneling

• Drive-by Download

• MAC Flooding

• SQL Injection

What vulnerability was notable for being easy to exploit and severe?

• BlueKeep

• Heartbleed

• Log4j

• PrintNightmare

• WannaCry

Why are DoS and DDoS attacks a major concern in the cloud?

• Cloud apps are globally accessible

• Cloud apps are rarely backed up

• Cloud services use firewalls only

• They can bypass two-factor authentication

• They only target mobile applications

What does Out-of-Bounds Write allow attackers to do?

• Access restricted memory

• Change Wi-Fi passwords

• Disable cloud billing

• Modify MAC addresses

• Spoof IP addresses

What is one risk of not patching cloud systems?

• Cloud service outages

• Firewall misconfiguration

• IP address leakage

• Increased bandwidth costs

• Vulnerability to critical CVEs