Your company is migrating to a Platform as a Service (PaaS) model to reduce infrastructure overhead. Which of the following accurately describes a key difference in security responsibilities between PaaS and Infrastructure as a Service (IaaS)?

• In PaaS, the provider secures applications and OS; in IaaS, the customer secures both.

• In IaaS, the customer secures hardware and apps; in PaaS, the provider secures everything.

• In both models, the customer is responsible for the entire stack.

• In PaaS, the customer secures the infrastructure; in IaaS, the provider manages security.

A network engineer is choosing between traditional infrastructure and SDN. Which of the following best highlights a security advantage of SDN?

• SDN lacks segmentation, making it less secure than traditional networking.

• Traditional networks are more secure due to static configurations.

• SDN enables centralized control and real-time policy enforcement.

• Both models offer the same level of security.

Your team is deciding between containerization and virtualization. Which option provides stronger hardware-level isolation?

• Containerization, due to app-level segregation

• Virtualization, via hypervisor-based separation

• Both are equally secure

• Containerization, because each app runs in a VM

Which of the following is a primary concern when deploying IoT devices in an enterprise environment?

• Better scalability than traditional systems

• Advanced encryption makes them more secure

• Easier patch management

• Limited security features make them more vulnerable

A company is implementing a solution to ensure uptime during server failure. What is the main difference between load balancing and clustering?

• Load balancing spreads traffic; clustering ensures failover with grouped servers.

• Clustering spreads traffic; load balancing enables failover.

• They’re interchangeable terms.

• Clustering requires geo-dispersed nodes; load balancing replicates data.

A company hires an external auditor to validate compliance with government regulations. What type of audit is being conducted?

• Internal Audit

• Self-Assessment

• Regulatory Examination

• Technical Assessment

An employee receives an email requesting login credentials. They’re unsure if it’s legitimate. What should they do?

• Click the link and verify credentials

• Forward it to a coworker

• Report it to IT/security

• Reply to the sender for confirmation

Your organization wants to prevent threats from spreading laterally in the network. Which technique helps isolate sensitive areas?

• Encryption

• Segmentation

• Access Control List

• Application Allow List

To reduce attack surface and run only necessary software, which technique should be applied?

• Least Privilege

• Decommissioning

• Hardening Techniques

• Monitoring

An organization uses logs to track user activity on the database. What part of the AAA model does this represent?

• Authentication

• Authorization

• Accounting

• Attestation