CyberVista Test CyberVista Cloud Security Questions and Answers 1 — Questions and Answers
Question 1: Which cloud deployment model provides infrastructure exclusively for a single organization and may be hosted on-premises or by a third party?
- Public cloud
- Private cloud (Correct answer)
- Hybrid cloud
- Community cloud
Correct answer: Private cloud
A private cloud dedicates resources to a single organization, offering greater control and privacy than public alternatives.
Question 2: What is the shared responsibility model in cloud security?
- The cloud provider is responsible for all security
- Security duties are divided between the cloud provider and the customer based on the service model (Correct answer)
- Customers are solely responsible for all security controls
- A third-party auditor handles all security requirements
Correct answer: Security duties are divided between the cloud provider and the customer based on the service model
In the shared responsibility model, the cloud provider secures the underlying infrastructure while customers secure their data, identities, and configurations.
Question 3: Which cloud service model gives customers the most control over the operating system, middleware, and runtime environment?
- SaaS
- PaaS
- IaaS (Correct answer)
- FaaS
Correct answer: IaaS
Infrastructure as a Service (IaaS) provides virtualized compute, storage, and networking, allowing customers to manage everything from the OS up.
Question 4: What is a Cloud Access Security Broker (CASB)?
- A firewall appliance deployed in the cloud
- A security policy enforcement point between cloud users and cloud services (Correct answer)
- An identity provider for single sign-on to cloud apps
- A tool for scanning cloud storage for malware
Correct answer: A security policy enforcement point between cloud users and cloud services
A CASB sits between users and cloud services to enforce security policies such as data loss prevention, access control, and threat protection.
Question 5: Which attack exploits misconfigured cloud storage buckets to access sensitive data without authentication?
- SQL injection
- Insecure direct object reference
- Cloud storage enumeration (Correct answer)
- Container escape
Correct answer: Cloud storage enumeration
Cloud storage enumeration attacks target publicly accessible or misconfigured buckets (e.g., S3) to read or exfiltrate sensitive data.
Question 6: What term describes the practice of spreading data and workloads across multiple cloud providers to avoid vendor lock-in and increase resilience?
- Cloud bursting
- Multi-cloud strategy (Correct answer)
- Cloud federation
- Hybrid deployment
Correct answer: Multi-cloud strategy
A multi-cloud strategy uses two or more cloud providers, reducing dependency on any single vendor and improving availability.
