A media company wants to restrict video streaming so that only users in the United States and Canada can access their service. Which Route 53 feature should be used?

A European financial services company must ensure EU customer DNS queries resolve only to EU-based servers to meet GDPR requirements. Which routing policy enforces this compliance?

An e-commerce company wants customers in Asia redirected to a region-specific site that displays local promotions and prices. Which routing option should be configured?

A company called TechGlobal sets up Route 53 Geolocation Routing for the U.S., Europe, and Asia. Mia, a user from South America, tries to access the site but is not mapped. What happens?

A multinational retailer uses Route 53 Geolocation Routing. If a primary region becomes unavailable, how can DNS still direct traffic to backup servers?

Anika is working for a government agency that requires DNS records in Route 53 to be cryptographically validated to prevent cache poisoning and spoofing attacks. Which feature should she enable?

A multinational corporation hosts a high-profile web app prone to Layer 7 attacks. The security team wants real-time DDoS cost protection, detailed attack diagnostics, and 24/7 AWS support. Which AWS service tier should they use?

A financial firm needs to identify DNS queries from compromised machines trying to exfiltrate data. Which AWS feature provides query logging for DNS requests?

A SaaS provider uses both AWS and Azure to host services. They want a DNS solution that ensures low-latency, multi-cloud global failover across both providers. Which approach is most effective?

During a DDoS attack, a retailer notices AWS WAF rate-limiting blocks some legitimate flash-sale traffic along with malicious requests. How should this be mitigated?

An e-commerce company wants DNS to direct users to the nearest regional server to minimize latency. Which Route 53 routing policy should they use?

William is setting up a global website and wants to ensure that users are always directed to the server region with the lowest network delay. Which routing policy should William use to achieve this?

Kai is managing a hybrid IT environment where AWS Route 53 is used for public DNS and Microsoft Active Directory DNS is used for internal workloads. The team wants to prevent DNS spoofing and exfiltration between the two systems. Which practice is most effective?

A DevSecOps team is adopting Infrastructure as Code (IaC) to deploy resources across AWS and Azure. They want to automatically detect misconfigured security groups, public S3 buckets, and non-compliant IAM roles before deployment. Which approach should they use?

Avery is a security engineer at a tech company. She wants to continuously check the company's AWS EC2 instances and container workloads for CVE vulnerabilities, exposed ports, and misconfigured IAM roles. Which AWS service should she enable?

Grace, a member of a cloud infrastructure team, enables Single Root I/O Virtualization (SR-IOV) on virtual machines in her company’s data center. This allows the VMs to have direct access to the physical NIC, bypassing the hypervisor’s virtual switch. What is the main operational benefit of this configuration?

Aria is setting up a cloud environment for her company and is considering different technologies to optimize network performance. Which of the following is a benefit of using SR-IOV in this scenario?

A financial institution wants to automatically check for open firewall rules, public Cloud Storage buckets, and excessive IAM permissions in Google Cloud. Which feature should they enable in Security Command Center (SCC)?

A multinational company wants to reduce shadow IT risks by automatically identifying and shutting down cloud resources provisioned outside approved governance policies. Which approach is most effective?

During an annual disaster recovery (DR) test at a healthcare provider, engineers discover that after an automated failover to a secondary region, certain IAM policies and backup configurations are missing from the recovery environment. What does this reveal?

A financial institution is migrating legacy applications to the cloud. The security team wants to ensure that current security controls, compliance standards, and operational processes are not weakened during migration. Which step should they take first?

Aria, a healthcare provider, is evaluating a third-party SaaS vendor for patient data storage. To ensure compliance with HIPAA, which action should she prioritize before procurement?

A retail company wants to automatically detect and remediate non-compliant S3 buckets that are publicly accessible. Which AWS service can enforce these compliance rules automatically?

Scarlett, an auditor at a large company, requests evidence of all IAM role changes over the past 90 days. Which AWS service provides historical configuration data?

A financial services company must ensure that all EC2 instances are tagged with Owner and Environment keys before deployment. Which AWS service can automatically enforce this policy?

Arjun, a cloud engineer at a growing tech company, needs to automatically identify and remediate security groups that allow unrestricted inbound SSH (0.0.0.0/0:22). Which service is best suited for this?

Noah, a forensic analyst, is investigating a security breach and creates an EBS snapshot of a compromised EC2 instance. Which best practice ensures the snapshot can be used as evidence in court?

Sophia is a cloud vendor who wants to demonstrate alignment with industry-standard security controls and publish her company's security posture for customers to review. Which framework and registry should Sophia use?

Harper, a member of a security team, suspects data exfiltration from an EC2 instance in their AWS environment. Which AWS feature provides visibility into IP traffic flow metadata to support breach investigation?

James is working for a company that is worried about being unable to migrate their workloads from one cloud provider to another because of proprietary APIs and service dependencies. What is this risk called?

Arjun is working at a company that provides cloud services to various clients. His responsibilities include overseeing cloud service operations, managing SLAs, and ensuring the delivery of services to customers. According to the NIST Cloud Reference Architecture, which role does Arjun fulfill?

During a security incident in Google Cloud, Maya is assigned to coordinate response efforts, make final decisions, and communicate with executives. Which role is this?

Emma is part of a security team at a company that is planning to migrate its workloads to the cloud. Before starting the migration, the company needs to ensure its current security controls and compliance requirements are aligned with the cloud provider's capabilities. Which step should Emma and her team perform?

A healthcare company is evaluating a SaaS vendor to handle patient data. To ensure HIPAA compliance, what should be performed before procurement?

Zoe's company is planning to use several cloud services from different providers. She needs help selecting the right services, negotiating contracts, and managing the company's usage across all these providers. In the NIST Cloud Reference Architecture, which role would assist Zoe with these tasks?

Charlotte is leading a company's migration of workloads to AWS. She wants a structured approach that covers areas like people, governance, operations, and security. Which framework should she follow?

A forensic investigator needs to share an Azure VM snapshot with an external incident response team. The access should be temporary and limited to read-only use. Which Azure feature should be applied?

During a red-team engagement, Aiden is tasked with assessing the security of a company's cloud infrastructure. Aiden enumerates cloud resources by accessing metadata services and exposed APIs. What type of activity is this?

Samuel is leading a team to improve their organization's cybersecurity posture. He mentions that NIST CSF is ________-centric, not a full migration framework. What does he mean?

Charlotte is leading a cloud security project and comes across the CSA CCM. She needs to explain to her team that CSA CCM is a ________ matrix, not migration guidance.

Olivia is leading an IT team and wants to implement best practices for managing their IT services. She learns that ITIL is focused on IT service management, not ________ adoption.

William is the IT security manager at an enterprise that uses multiple cloud providers. He wants to ensure that security policies remain consistent across all these environments. Which NIST recommendation addresses the need for homogeneity in operations?

A forensic team led by Mason acquires evidence from a compromised EC2 instance during a corporate security breach investigation. Which step ensures the evidence remains admissible and defensible in an investigation?

William is leading a digital transformation initiative at a large enterprise, and the company decides to establish a Cloud Center of Excellence (CCoE). What is the primary function of this CCoE?

Mason, a forensic analyst, takes a snapshot of a compromised Azure VM for evidence. Before mounting the snapshot to another VM, which precaution should be taken?

During a major security breach in a company's cloud infrastructure, Nora receives an alert about unauthorized access. Who should act as the first responder to contain and mitigate the incident?

Michael, the CIO of a large corporation, leads an initiative to implement a cloud governance framework. The goal is to balance security, cost management, and innovation across various stakeholders in the company. What is the primary purpose of this governance?

A financial services firm requires a DR solution with near real-time replication and the ability to fail over within minutes, but at a lower cost than full hot-site redundancy. Which approach should be used?

Samuel, the IT manager at a large enterprise, is concerned about employees provisioning unauthorized cloud services, which could introduce security risks. Which governance practice would be most effective for Samuel to implement?

A healthcare company conducts an annual disaster recovery (DR) plan test and discovers that several applications cannot fail over within the required recovery time objectives (RTOs). What does this indicate?

During an active cloud breach, the security team isolates affected EC2 instances, blocks malicious IPs, and revokes compromised credentials. Which phase of the incident response lifecycle are they performing?

A global enterprise wants to establish a certified Information Security Management System (ISMS) for cloud operations and apply detailed control guidance. Which standards should they adopt?

A financial firm discovers during DR testing that backup systems fail when switching from primary to warm standby sites. Which maturity improvement should be prioritized?

An organization uses SOAR (Security Orchestration, Automation, and Response) to automatically quarantine infected workloads and rotate IAM credentials when compromise is detected. Which IR phase is being automated?

An online retailer wants a DR solution where a scaled-down version of production is always running in another region. In case of disaster, workloads can scale up quickly with minimal downtime. Which strategy best fits this requirement?

An enterprise wants to eliminate unauthorized cloud services provisioned outside IT governance. Which control is most effective?

A financial services firm chooses a DR approach where infrastructure and network resources are pre-provisioned, but applications and data need to be restored before use. Which option does this describe?

Which of the following recovery site types includes pre-configured infrastructure, enabling faster recovery than a cold site but slower than a hot site?

During a scheduled DR exercise, an organization discovers that replication lag prevents certain RDS databases from meeting Recovery Point Objectives (RPOs). What does this finding indicate?

During an ongoing attack, a cloud provider’s IR team automatically isolates compromised Kubernetes pods, blocks malicious IP addresses, and revokes leaked credentials. Which IR phase is this?

A global SaaS provider experiences a data breach. Which team should act as the first responder to preserve evidence and begin containment?

A corporation’s board mandates that cloud governance must balance security, financial efficiency, and innovation. What is the main outcome of this governance process?

An insurance provider selects a DR approach where partial infrastructure is always running in another region, allowing workloads to scale rapidly in case of disaster. Which strategy does this describe?

A multinational enterprise identifies employees using unauthorized SaaS applications. Which governance approach provides real-time prevention of shadow IT?

A cloud provider wants to align with international standards for ISMS certification and detailed security controls. Which ISO standards should they adopt?

During a ransomware attack in the cloud, who should perform the initial containment and evidence preservation?

An enterprise defines a governance model to balance security, compliance, and business innovation. What is the outcome?

A media company requires a DR solution that provides partial infrastructure always running, capable of scaling up quickly. Which DR approach matches this need?

A global bank wants to prevent employees from provisioning unauthorized SaaS apps. Which governance strategy is most effective?