312-40 Practice Test

312-40 Practice Test practice questions, page 5 of 6, with answer review and explanations.

Question 21

Jimmi Simpson has been working as a cloud security engineer in an IT company situated in Livonia, Michigan. His organization uses Microsoft Azure’s cloud-based services. Jimmi wants a cloud-based, scalable SIEM and SOAR solution that uses threat intelligence and provides intelligent security analytics across his organization. Which of the following Microsoft Azure services provides a single solution for threat visibility, alert detection, threat response, and proactive hunting that reduces the number of attacks, provides a birds-eye view across the organization, generates high volumes of alerts, and ensures long resolution time frames?

  1. Anomaly Detector
  2. Application Insights
  3. Azure Sentinel
  4. Cloud App Security

Question 22

A security incident has occurred within an organization’s AWS environment. A cloud forensic investigation procedure is initiated for the acquisition of forensic evidence from the compromised EC2 instances. However, it is essential to abide by the data privacy laws while provisioning any forensic instance and sending it for analysis. What can the organization do initially to avoid the legal implications of moving data between two AWS regions for analysis?

  1. Create evidence volume from the snapshot
  2. Provision and launch a forensic workstation
  3. Attach the evidence volume to the forensic workstation
  4. Mount the evidence volume on the forensic workstation

Question 23

Martin Sheen is a senior cloud security engineer in SecGlob Cloud Pvt. Ltd. Since 2012, his organization has been using AWS cloud-based services. Using an intrusion detection system and antivirus software, Martin noticed that an attacker is trying to breach the security of his organization. Therefore, Martin would like to identify and protect the sensitive data of his organization. He requires a fully managed data security service that supports S3 storage and provides an inventory of publicly shared buckets, unencrypted buckets, and the buckets shared with AWS accounts outside his organization. Which of the following Amazon services fulfills Martin’s requirement?

  1. Amazon GuardDuty
  2. Amazon Macie
  3. Amazon Security Hub
  4. Amazon Inspector

Question 24

Melissa George is a cloud security engineer in an IT company. Her organization has adopted cloud-based services. The integration of cloud services has become significantly complicated to be managed by her organization. Therefore, her organization requires a third-party to consult, mediate, and facilitate the selection of a solution. Which of the following NIST cloud deployment reference architecture actors manage cloud service usage, performance, and delivery, and maintains the relationship between the CSPs and cloud consumers?

  1. Cloud Auditor
  2. Cloud Carrier
  3. Cloud Provider
  4. Cloud Broker

Question 25

SeaCloud Soft Pvt. Ltd. is an IT company that develops software and applications related to the healthcare industry. To safeguard the data and applications against attackers, the organization adopted cloud computing. The organization did not trust the cloud service provider; therefore, it implemented an encryption technique that secures data during communication and storage. SeaCloud Soft Pvt. Ltd. performed computation on the encrypted data and then sent the data to the cloud service provider. Based on the given information, which of the following encryption techniques was implemented by SeaCloud Soft Pvt. Ltd.?

  1. Ciphertext attribute-based encryption
  2. Fully homomorphic encryption
  3. Key policy attribute-based encryption
  4. Identity-based encryption