An employee logs into the corporate cloud system from an unknown device in a different country. The system wants strong authentication without locking out legitimate users. Which method best fits?

• Single-factor password

• Role-based access control

• Adaptive multi-factor authentication

• Signed URLs

In a healthcare cloud system, doctors need to edit medical records. Billing staff only view billing info. Which access control model suits this requirement?

• Mandatory Access Control (MAC)

• Role-Based Access Control (RBAC)

• Attribute-Based Access Control (ABAC)

• Discretionary Access Control (DAC)

A company wants employees to log in once and access apps across multiple cloud providers. Which of the following achieve this smoothly?

• RBAC and encryption

• Identity Federation and Single Sign-On (SSO)

• Multi-factor authentication only

• Signed URLs

A cloud admin removes unnecessary software from VMs to minimize vulnerabilities. What is the direct benefit?

• More software features

• Increased risk

• Smaller attack surface and efficiency

• Easier password sharing

Which is true about cloud VM boot security if the goal is to stop unauthorized boot and later verify boot status?

• Both verified and measured boot halt boot

• Verified boot halts unauthorized boot; measured boot records boot data

• Measured boot halts boot; verified boot logs

• Both lack cryptographic checks

A cloud security team wants to automatically detect and block attacks in real time. Which solution fits?

• Intrusion Detection and Prevention Systems (IDS/IPS)

• Password complexity policies

• Key Management Services (KMS)

• Identity providers

A contractor requires file access for 48 hours only. Which control best fits?

• Bucket IP Filtering

• Access Control List (ACL)

• Signed URL with expiration

• Encryption key sharing

Clients complain of intercepted data sending to cloud. What secures transmission?

• Data backup

• Encryption at rest

• Encryption in transit (TLS/SSL)

• Password policy

Sensitive data appears online unintentionally through cloud storage misconfiguration. What caused this vulnerability?

• Insider threat

• External attack

• Cloud misconfiguration

• Encryption failure

Cloud servers are overwhelmed by excessive network traffic causing downtime. What type of attack is this?

• Phishing

• Malware

• Distributed Denial of Service (DDoS)

• SQL Injection