Unit IV

Which of the following best explains the relationship between design patterns and cloud security?

• Design patterns eliminate the need for encryption by standardizing interfaces.

• Security design patterns provide reusable solutions to recurring cloud vulnerabilities.

• Cloud design patterns are primarily focused on UI/UX improvement.

• Design patterns in the cloud are used only for system performance optimization.

In a cloud bursting scenario, which factor most critically determines whether automated bursting will succeed?

• Availability of redundant VPN gateways

• Interoperability between private and public clouds

• The geographic proximity of data centers

• Type of hypervisor used in private cloud

A multinational company wants to enforce data residency and access restrictions based on user geography. Which design mechanism directly supports this?

• Cloud bursting

• Elastic load balancing

• Proxy gateway filtering

• Geo-tagging

Which security risk is most specific to geo-tagging in cloud systems?

• Data redundancy failure

• Unauthorized location inference and profiling

• Credential replay attacks

• Denial-of-Service from remote endpoints

Which of the following represents the correct sequence of Secure On-Premise Internet Access components when connecting to cloud services?

• Proxy → VPN → Firewall → CASB → SIEM

• SIEM → CASB → Firewall → Proxy → VPN

• VPN → Proxy → CASB → Firewall → SIEM

• Firewall → Proxy → VPN → CASB → SIEM

The Zero Trust Network Access (ZTNA) pattern fundamentally differs from traditional perimeter security in that it:

• Authenticates only once per session.

• Trusts users based on network location.

• Dynamically verifies every access request based on identity and context.

• Allows implicit trust for devices inside the local subnet.

Which combination of components best implements Cloud Resource Access Control?

• Firewall, IDS/IPS, Proxy Server

• VPN, Load Balancer, API Gateway

• Attribute Authority, Secure Token Service, IAM

• MFA, Cloud DNS, CASB

In Secure Cloud Interfaces, the Authentication Gateway Service (AGS) plays a critical role by:

• Filtering and authenticating API requests before granting access

• Encrypting data at rest

• Balancing workloads across multiple clouds

• Storing cryptographic keys for clients

Which of the following best illustrates a scenario requiring the “Segmentation and Isolation Pattern” in on-premise security?

• A company encrypting all traffic using IPsec tunnels

• A cloud service provider offering burst capacity on demand

• A data center applying a zero trust access model

• A firm isolating guest Wi-Fi traffic from internal business systems

A global organization wants to ensure that customer data for European users remains stored only within EU-based data centers, as required by GDPR.
Which cloud security mechanism best supports this requirement?

• Cloud Firewall

• Federated Identity

• Geo-tagging

• Elastic Scaling