035_Cloud-specific Vulnerabilities – CompTIA Security+ –

What makes the public cloud appealing but also risky?

• Built-in AI

• Global access

• Lack of bandwidth

• Offline-first mode

What risk does lack of MFA primarily increase?

• Unauthorized account access

• Increased system performance

• Enhanced user experience

• Reduced data storage costs

What is a common flaw related to input sanitization in cloud apps?

• SQL Injection

• Cross-Site Scripting (XSS)

• Buffer Overflow

• Command Injection

What vulnerability was notable for being easy to exploit and severe?

• BlueKeep

• Heartbleed

• Log4j

• PrintNightmare

What is the CVSS score range indicating a critical vulnerability?

• 0 to 3

• 4 to 6

• 7 or higher

• 8 to 10

What can misconfigured authentication lead to?

• Unauthorized access

• Increased system performance

• Enhanced user experience

• Improved data encryption

What do MFA and proper credential management help prevent?

• Unauthorized access

• Data loss

• System downtime

• Network congestion

What kind of attack can exploit unpatched cloud systems?

• Remote Code Execution (RCE)

• SQL Injection

• Cross-Site Scripting (XSS)

• Denial of Service (DoS)

Why must both OS and cloud applications be patched regularly?

• To enhance user interface design

• To prevent escalation of compromise

• To increase system storage capacity

• To improve internet speed

What type of vulnerability did Spring Cloud Function have?

• Remote system control

• Local file inclusion

• SQL injection

• Cross-site scripting