10 - Cloud and Virtualization Security

Question 1

Kevin discovered that his web service was being overwhelmed by traffic, causing a CPU bottleneck. Using the interface offered by his cloud service provider, he added another CPU to the server. What term best describes Kevin’s actions?

Answer 1

Vertical Scaling

Question 2

Fran’s Organization uses Type 1 hypervisor to implement an IaaS offering that is sells to customers. What security control doesn’t apply to this environment?

Answer 2

A provider maintaining security patches on the host operating system

Question 3

In what cloud security model does the cloud service provider bear the most responsibility for implementing security controls?

Answer 3

Software as a Service (SaaS)

Question 4

Greg would like to find a reference document that describes how to map cloud security controls to different regulatory standards. What document would best assist with this task?

Answer 4

The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) -or- CSA CCM

Question 5

Wanda is responsible for some seismic sensors placed at remote locations. The sensors have low-bandwidth connections and she would like to place computing power on the sensors to allow them to preprocess data before it is sent back to the cloud. What term best describes this computing approach?

Answer 5

Edge Computing

Question 6

True or False: Cloud computing customers provision resources through the service provider’s sales team.

Answer 6

False

Question 7

Helen designed a new payroll system that she offers to her customers. She hosts the payroll system in Amazon Web Service (AWS) and her customers access it through the web. What tier of cloud computing best describes Helen’s service?

Answer 7

Software as a Service (SaaS)

Question 8

Which cloud computing deployment model requires the use of a unifying technology platform to tie together components from different providers?

Answer 8

Hybrid Cloud

Question 9

What would commonly be available as an IaaS service offering?

Answer 9

Storage, Networking, and Computing

Question 10

What is NOT an example of infrastructure as code?

• JSON (Java)
• Code interacting with a cloud provider’s API
• Using a provider’s web to provision resources
• YAML

Answer 10

Using a cloud provider’s web interface to provision resources is NOT IaC.

Question 11

Brian is selecting a CASB for his org and he would like to use an approach that interacts with the cloud provider directly. Which CASB approach is the most appropriate for his needs?

Answer 11

API-Based CASB

Question 12

In what categories are customers typically charged ($$) based on the number of virtual server instances dedicated to their use?

Answer 12

IaaS and PaaS

Question 13

Brian would like to limit the ability of users inside his org to provision expensive cloud server instances without permission. What type of control would best help him achieve this goal?

Answer 13

Resource Policy

Question 14

Ursula would like to link the networks in her on-premises datacenter with cloud VPCs in a secure manner. What technology would help her best achieve this goal?

Answer 14

Transit Gateway

Question 15

What component of a virtualization platform is primarily responsible for preventing Virtual Machine (VM) escape attacks?

Answer 15

Hypervisor

Question 16

Ryan is selecting a new security control for his org. He would like to use it in their multi-cloud environment, and would like to minimize the admin work required from his fellow technologists. What approach would best meet his needs?

Answer 16

Third-Party Control

Question 17

Kira would like to implement a security control that can restrict access across all of the SaaS solutions used by her org. What control would best meet her needs?

Answer 17

Cloud Access Security Brokers (CASB)

Question 18

Howard is assessing the legal risks to his org based on its handling of PII. The org that is based in the U.S., handles the data of customers located in Europe, and stores info in Japanese datacenters. What law(s) would be most important to Howard during his assessment?

Answer 18

U.S. Law, Japanese Law, and European Law

Question 19

Brenda’s company provides a managed incident response service to its customers. What term best describes this type of service offering

Answer 19

Managed Security Service Provider (MSSP)

Question 20

Tony purchases virtual machines from Microsoft Azure and uses them exclusively for use by his org. What model of cloud computing is this?

Answer 20

Public Cloud