Back to Security Architecture and Engineering

Cloud Security

5 minutes 5 Questions

Cloud Security focuses on the protection of data, applications, and infrastructure hosted within cloud environments, such as Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and Software-as-a-Service (SaaS) offerings. Cloud security is an essential consideration for modern organiza…

Test mode:
Start practice test
CISSP - Cloud Security Example Questions

Test your knowledge of Cloud Security

Question 1

A development team in an organization is creating an application that will be hosted on a private cloud and will interact with several third-party APIs. The security team wants to implement a security measure to ensure the secure transmission of API keys and tokens. What would be the best solution?

Correct Answer: Use transport-layer encryption, like TLS, to secure the sensitive data

Transport-layer encryption, like TLS, is the best option to secure sensitive data like API keys and tokens during transmission. Storing them in plaintext, sharing encryption keys with third parties, hashing the keys, relying on default security settings, or implementing access controls do not adequately address the requirement of secure transmission.

Question 2

An organization stores sensitive data on a public cloud storage service with access restriction policies in place. An employee accidentally misconfigures these policies, resulting in unauthorized access to the data. The organization is using the shared responsibility model. Which of the following should primarily be responsible for this incident?

Correct Answer: The organization

In the shared responsibility model, security and compliance responsibility is divided between the cloud provider and the customer. Although the employee caused the misconfiguration, the organization is primarily responsible for the incident since it deals with user access settings and policies.

Question 3

A company is migrating its services to a public cloud infrastructure. After analyzing their security requirements, they decide to implement a CASB solution. Which of the following best describes a primary reason to use a CASB?

Correct Answer: To provide visibility and control over cloud services

A CASB (Cloud Access Security Broker) helps provide visibility and control over cloud services, allowing organizations to enforce security policies and maintain regulatory compliance in the cloud. Other options mentioned deal with infrastructure security, network monitoring, load balancing, authentication, and data encryption, but are not primary reasons to implement a CASB.

More Cloud Security questions
27 questions (total)
Start 27 question test