FT_1

Which of the following best defines Infrastructure Security in a cloud environment?

• Security of user credentials during authentication

• Protection of virtual machines, networks, and physical servers from threats

• Monitoring user activity in SaaS platforms

• Data encryption at rest and in transit

Which security model focuses on ensuring only authorized users and systems have access to specific cloud resources?

• Data Loss Prevention (DLP)

• Identity and Access Management (IAM)

• Network Access Control (NAC)

• Security Information and Event Management (SIEM)

In cloud infrastructure, segmentation at the virtual network layer primarily helps in:

• Improving data redundancy

• Isolating workloads to limit lateral movement during an attack

• Increasing latency for better monitoring

• Enabling faster cloud provisioning

Which of the following is a major data privacy concern in multi-tenant cloud environments?

• High availability

• Data deduplication

• Unauthorized data access

• Network latency

Which of the following best describes the Shared Responsibility Model in cloud security?

• Cloud provider handles all layers of security

• Customer handles application security, provider handles physical and network security

• Both share all responsibilities equally

• Provider is responsible only for encryption

Network-level security in cloud environments commonly employs:

• Firewalls and Intrusion Detection Systems

• User authentication methods

• Virtualization and APIs

• Backup and disaster recovery tools

Which mechanism in cloud computing is most effective in mitigating Man-in-the-Middle (MITM) attacks?

• Tokenization

• SSL/TLS encryption

• Hypervisor isolation

• Key escrow systems

What is the main focus of Host-level security in the cloud?

• Protecting APIs and SDKs

• Securing the operating system and applications on virtual machines

• Managing user identities

• Encrypting data at rest

Application-level security in a cloud service should primarily defend against:

• DDoS attacks

• SQL Injection and Cross-Site Scripting (XSS)

• Physical tampering

• Virtual machine migration failures

Which of the following best ensures data confidentiality in cloud storage?

• Hashing

• Redundancy

• Encryption

• Tokenization