WorksheetsCloud Security Quiz
Total questions: 10
Worksheet time: 5mins
Which of the following best prevents SQL Injection attacks in cloud-hosted web applications?
Firewall rules and IP blocking
Using parameterized queries with input validation
Enabling multi-factor authentication
Using encryption for database backups
In the context of web attacks, what is the primary risk if Cross-Site Request Forgery (CSRF) occurs on a cloud-hosted financial application?
Loss of encryption keys
Unauthorized actions performed on behalf of authenticated users
Increased cloud storage cost
Data center outage
A company wants to ensure data confidentiality for files stored in a public cloud. Which of the following approaches provides the strongest security?
Encrypting data with provider-managed keys
Using client-side encryption with customer-managed keys
Relying solely on TLS encryption for data in transit
Performing regular data backups
During a web application attack, attackers exploit unvalidated input fields to extract database information. Which security property is most compromised?
Authentication
Privacy
Integrity
Availability
In a multi-tenant cloud database environment, which mechanism best enforces authentication and prevents unauthorized tenant access?
Homomorphic encryption
Role-Based Access Control (RBAC) with least privilege principle
Cloud provider's Service Level Agreement (SLA)
Data replication across regions
A cloud database experienced data tampering due to insider threats. Which cryptographic technique helps in ensuring data integrity detection?
Hashing with digital signatures
Symmetric key encryption
Asymmetric key encryption
SSL/TLS certificates
Which of the following web attack techniques primarily targets the authentication mechanism of a cloud application?
SQL Injection
Cross-Site Scripting (XSS)
Credential Stuffing
XML External Entity (XXE)
A cloud application uses OAuth 2.0 for authentication. If the authorization code is intercepted, what type of attack can occur?
Replay Attack
Man-in-the-Middle Attack
Session Fixation Attack
Code Injection Attack
Which of the following best describes data privacy in a cloud context?
Ensuring only authorized parties can access data
Preventing data loss during cloud migration
Detecting any unauthorized data modification
Guaranteeing uptime of cloud services
A company wants to secure web traffic between users and its cloud servers. Which combination provides confidentiality, integrity, and authentication simultaneously?
TLS with mutual certificate authentication
AES encryption with public key infrastructure
VPN tunnel with symmetric encryption only
Hash-based message authentication codes (HMAC) alone
