WorksheetsFT-2
Total questions: 25
Worksheet time: 13mins
Which layer in the Layered Cloud Architecture is responsible for managing virtualization and resource allocation?
Application Layer
Platform Layer
Infrastructure Layer
User Layer
According to the NIST Cloud Computing Reference Architecture, which actor is responsible for managing the cloud service lifecycle?
Cloud Consumer
Cloud Broker
Cloud Provider
Cloud Auditor
Which of the following best differentiates Public Cloud from Private Cloud?
Public cloud has lower latency than private cloud
Private cloud is accessible only to a single organization
Public cloud does not provide virtualization
Private cloud offers less control over security
Which of the following is an example of PaaS (Platform as a Service)?
Amazon EC2
Google App Engine
Dropbox
Microsoft Azure Blob Storage
In Architectural Design Challenges, ensuring interoperability between multiple cloud providers primarily deals with:
Security Issues
Portability Issues
Performance Issues
Data Volume Issues
Which component of Cloud Storage Architecture manages data replication and fault tolerance?
Control Node
Metadata Manager
Storage Node
Application Gateway
Storage-as-a-Service (STaaS) allows users to:
Deploy their own physical storage
Store and access data via a cloud provider’s managed storage infrastructure
Encrypt files locally only
Manage hardware backup processes manually
A major advantage of cloud storage over traditional storage systems is:
Dependence on local hardware
Limited scalability
Pay-as-you-go model and elastic capacity
Manual data replication
Which of the following is NOT a major cloud storage provider?
Amazon S3
Google Cloud Storage
Azure Storage
Oracle Hyper-V
The Amazon S3 (Simple Storage Service) primarily uses which storage principle?
Block-based storage
Object-based storage
File-based storage
Key-value in-memory storage
Which cloud security principle ensures that actions cannot be denied after being performed?
Integrity
Authentication
Non-repudiation
Confidentiality
In cloud security, Defense in Depth refers to:
Using multi-layered security controls across the system
Encrypting only sensitive user data
Implementing antivirus software
Using a single firewall
The Principle of Least Privilege (PoLP) ensures:
Each user gets maximum access to increase efficiency
Users have access only to resources essential for their role
Full administrative control to all users
Default access permissions are unrestricted
Which property ensures that data remains unchanged and accurate during transmission or storage?
Confidentiality
Integrity
Availability
Authentication
Which of the following is a stream cipher?
AES
DES
RC4
Blowfish
Block ciphers process data in:
Continuous streams
Fixed-size blocks
Variable-length streams
Single bits
In cryptographic systems, modes of operation for block ciphers (like CBC, CTR) are used to:
Manage user credentials
Define how multiple blocks of data are encrypted
Control key distribution
Store hash tables
Public-Key Cryptography differs from symmetric cryptography because it uses:
One shared secret key
Multiple initialization vectors
A pair of mathematically related keys (public and private)
Only session keys for encryption
A digital signature ensures:
Confidentiality only
Authentication and integrity of digital messages
Encryption of the entire file
Key rotation in cryptographic systems
A hash function must have which of the following properties?
Must be reversible
Produces a fixed-length output from variable input
Uses public-private key pairs
Only works with symmetric keys
In Public Key Infrastructure (PKI), the entity responsible for validating identities and issuing digital certificates is the:
Token Authority
Certificate Authority (CA)
Key Registrar
Data Controller
Which of the following best describes key management in the cloud?
Creation, distribution, rotation, and revocation of encryption keys
Manual encryption by users
Password management for admin users
Synchronizing backup keys
The most significant key management challenge in IaaS, PaaS, and SaaS models is:
Managing user credentials
Deciding which entity controls and stores encryption keys — the user or the provider
Encrypting virtual machines
Reducing bandwidth for key exchange
In Symmetric Key Management, if the same key is used across multiple systems, what risk increases?
Data duplication
Data exposure
System performance
User authentication
Which cryptographic key management approach provides the strongest isolation and control to customers in a cloud setup?
Provider-managed keys
Customer-managed keys (CMK) with Bring Your Own Key (BYOK) model
Shared key rotation service
Session-based keys
