Cloud Security Fundamentals MCQs

Which of the following best describes the Shared Responsibility Model in cloud security?

a) Cloud provider secures infrastructure, customer secures workloads

b) Manual server configuration only

c) Monitoring logs only

d) Running CI/CD pipelines only

View Answer

Correct answer: A — Cloud provider secures infrastructure, customer secures workloads
Which of the following is true about Identity and Access Management (IAM)?

a) Pods run manually

b) Controls access to cloud resources using roles and policies

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Controls access to cloud resources using roles and policies
Which of the following is true about cloud encryption?

a) Pods run manually

b) Protects data at rest and in transit using cryptographic methods

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Protects data at rest and in transit using cryptographic methods
Which of the following is true about cloud firewalls?

a) Pods run manually

b) Control inbound and outbound traffic to cloud resources

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Control inbound and outbound traffic to cloud resources
Which of the following is true about compliance in cloud security?

a) Pods run manually

b) Ensures adherence to standards like GDPR, HIPAA, ISO

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Ensures adherence to standards like GDPR, HIPAA, ISO
Which of the following is true about cloud auditing?

a) Pods run manually

b) Tracks user activity and changes for accountability

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Tracks user activity and changes for accountability
Which of the following is true about cloud intrusion detection systems?

a) Pods run manually

b) Detect suspicious activity in cloud environments

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Detect suspicious activity in cloud environments
Which of the following is true about cloud key management services?

a) Pods run manually

b) Manage encryption keys securely in cloud

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Manage encryption keys securely in cloud
Which of the following is true about cloud vulnerability scanning?

a) Pods run manually

b) Identifies weaknesses in cloud workloads

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Identifies weaknesses in cloud workloads
Which of the following is true about cloud incident response?

a) Pods run manually

b) Processes to detect, respond, and recover from security incidents

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Processes to detect, respond, and recover from security incidents
Which of the following is true about IAM policies?

a) Pods run manually

b) Define permissions for users and roles

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Define permissions for users and roles
Which of the following is true about cloud security monitoring?

a) Pods run manually

b) Continuous observation of logs and metrics for threats

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Continuous observation of logs and metrics for threats
Which of the following is true about multi-factor authentication in cloud?

a) Pods run manually

b) Adds extra security by requiring multiple verification methods

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Adds extra security by requiring multiple verification methods
Which of the following is true about cloud network segmentation?

a) Pods run manually

b) Divides networks to limit access and reduce attack surface

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Divides networks to limit access and reduce attack surface
Which of the following is true about cloud patch management?

a) Pods run manually

b) Regularly updating systems to fix vulnerabilities

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Regularly updating systems to fix vulnerabilities
Which of the following is true about cloud security baselines?

a) Pods run manually

b) Standard configurations to ensure consistent security

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Standard configurations to ensure consistent security
Which of the following is true about cloud security automation?

a) Pods run manually

b) Automating security tasks like monitoring and compliance checks

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Automating security tasks like monitoring and compliance checks
Which of the following is true about cloud penetration testing?

a) Pods run manually

b) Simulating attacks to identify vulnerabilities

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Simulating attacks to identify vulnerabilities
Which of the following is true about cloud access logs?

a) Pods run manually

b) Record user activity for auditing and monitoring

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Record user activity for auditing and monitoring
Which of the following is true about cloud shared responsibility model?

a) Pods run manually

b) Provider secures infrastructure, customer secures workloads

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Provider secures infrastructure, customer secures workloads
Which of the following is true about cloud compliance audits?

a) Pods run manually

b) Independent reviews to ensure regulatory compliance

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Independent reviews to ensure regulatory compliance
Which of the following is true about cloud encryption keys?

a) Pods run manually

b) Used to secure data at rest and in transit

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Used to secure data at rest and in transit
Which of the following is true about cloud IAM roles?

a) Pods run manually

b) Assign permissions to users and services

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Assign permissions to users and services
Which of the following is true about cloud security alerts?

a) Pods run manually

b) Notify teams when suspicious activity is detected

c) Secrets storage only

d) Logs monitoring only

View Answer

Correct answer: B — Notify teams when suspicious activity is detected
Which of the following is true about cloud compliance standards?

a) Pods run manually

b) Frameworks like GDPR, HIPAA, ISO for cloud security

c) Secrets storage only

d) Monitoring CI/CD pipelines

View Answer

Correct answer: B — Frameworks like GDPR, HIPAA, ISO for cloud security
Which of the following is true about cloud IAM best practices?

a) Enforce least privilege access for all users

b) Secrets storage only

c) Monitoring logs only

d) Pods run manually

View Answer

Correct answer: A — Enforce least privilege access for all users
Which of the following is true about cloud encryption at rest?

a) Pods run manually

b) Secrets storage only

c) Protects stored data using cryptographic methods

d) Logs monitoring only

View Answer

Correct answer: C — Protects stored data using cryptographic methods
Which of the following is true about cloud encryption in transit?

a) Pods run manually

b) Secrets storage only

c) Secures data while moving across networks

d) Logs monitoring only

View Answer

Correct answer: C — Secures data while moving across networks
Which of the following is true about cloud compliance frameworks?

a) Pods run manually

b) Secrets storage only

c) Standards like GDPR, HIPAA, and ISO

d) Logs monitoring only

View Answer

Correct answer: C — Standards like GDPR, HIPAA, and ISO
Which of the following is true about cloud threat detection?

a) Pods run manually

b) Secrets storage only

c) Identifies suspicious activity using monitoring tools

d) Logs monitoring only

View Answer

Correct answer: C — Identifies suspicious activity using monitoring tools
Which of the following is true about cloud incident response automation?

a) Pods run manually

b) Secrets storage only

c) Automates detection and remediation of threats

d) Logs monitoring only

View Answer

Correct answer: C — Automates detection and remediation of threats
Which of the following is true about cloud auditing logs?

a) Pods run manually

b) Secrets storage only

c) Record user activity for accountability

d) Logs monitoring only

View Answer

Correct answer: C — Record user activity for accountability
Which of the following is true about cloud vulnerability management?

a) Pods run manually

b) Secrets storage only

c) Regularly scanning and patching workloads

d) Logs monitoring only

View Answer

Correct answer: C — Regularly scanning and patching workloads
Which of the following is true about cloud IAM role-based access?

a) Pods run manually

b) Secrets storage only

c) Assigns permissions based on roles

d) Logs monitoring only

View Answer

Correct answer: C — Assigns permissions based on roles
Which of the following is true about cloud compliance audits?

a) Pods run manually

b) Secrets storage only

c) Independent reviews to ensure regulatory compliance

d) Logs monitoring only

View Answer

Correct answer: C — Independent reviews to ensure regulatory compliance
Which of the following is true about cloud encryption key rotation?

a) Pods run manually

b) Secrets storage only

c) Regularly changing keys to enhance security

d) Logs monitoring only

View Answer

Correct answer: C — Regularly changing keys to enhance security
Which of the following is true about cloud IAM multi-factor authentication?

a) Pods run manually

b) Secrets storage only

c) Adds extra security by requiring multiple verification methods

d) Logs monitoring only

View Answer

Correct answer: C — Adds extra security by requiring multiple verification methods
Which of the following is true about cloud network segmentation?

a) Pods run manually

b) Secrets storage only

c) Divides networks to limit access and reduce attack surface

d) Logs monitoring only

View Answer

Correct answer: C — Divides networks to limit access and reduce attack surface
Which of the following is true about cloud patch management automation?

a) Pods run manually

b) Secrets storage only

c) Automatically updating systems to fix vulnerabilities

d) Logs monitoring only

View Answer

Correct answer: C — Automatically updating systems to fix vulnerabilities
Which of the following is true about cloud security baselines?

a) Pods run manually

b) Secrets storage only

c) Standard configurations to ensure consistent security

d) Logs monitoring only

View Answer

Correct answer: C — Standard configurations to ensure consistent security
Which of the following is true about cloud compliance monitoring?

a) Pods run manually

b) Secrets storage only

c) Continuous observation to ensure adherence to standards

d) Logs monitoring only

View Answer

Correct answer: C — Continuous observation to ensure adherence to standards
Which of the following is true about cloud IAM policy enforcement?

a) Pods run manually

b) Secrets storage only

c) Ensures permissions are applied consistently

d) Logs monitoring only

View Answer

Correct answer: C — Ensures permissions are applied consistently
Which of the following is true about cloud intrusion prevention systems?

a) Pods run manually

b) Secrets storage only

c) Block suspicious activity in cloud environments

d) Logs monitoring only

View Answer

Correct answer: C — Block suspicious activity in cloud environments
Which of the following is true about cloud compliance certifications?

a) Pods run manually

b) Secrets storage only

c) Certifications like ISO 27001 and SOC 2

d) Logs monitoring only

View Answer

Correct answer: C — Certifications like ISO 27001 and SOC 2
Which of the following is true about cloud IAM identity federation?

a) Pods run manually

b) Secrets storage only

c) Allows single sign-on across multiple systems

d) Logs monitoring only

View Answer

Correct answer: C — Allows single sign-on across multiple systems
Which of the following is true about cloud encryption key management?

a) Pods run manually

b) Secrets storage only

c) Securely storing and rotating encryption keys

d) Logs monitoring only

View Answer

Correct answer: C — Securely storing and rotating encryption keys
Which of the following is true about cloud compliance reporting?

a) Pods run manually

b) Secrets storage only

c) Generating reports to demonstrate adherence to standards

d) Logs monitoring only

View Answer

Correct answer: C — Generating reports to demonstrate adherence to standards
Which of the following is true about cloud IAM access reviews?

a) Pods run manually

b) Secrets storage only

c) Periodically reviewing user permissions for accuracy

d) Logs monitoring only

View Answer

Correct answer: C — Periodically reviewing user permissions for accuracy
Which of the following is true about cloud threat intelligence?

a) Pods run manually

b) Secrets storage only

c) Using external data to identify emerging threats

d) Logs monitoring only

View Answer

Correct answer: C — Using external data to identify emerging threats
Which of the following best describes Cloud Security Fundamentals overall?

a) Manual configuration of servers

b) Secrets storage only

c) Protecting cloud workloads with IAM, encryption, compliance, monitoring, and incident response

d) Logs monitoring only

View Answer

Correct answer: C — Protecting cloud workloads with IAM, encryption, compliance, monitoring, and incident response

Cloud Security Fundamentals MCQs

Quick Links to Explore