Question 1
Which practice best helps mitigate security risks by minimizing root/core access and restricting deployment creation?
- Enforcing the principle of ‘trust and eventually verify on demand’
- Disabling multi-factor authentication for staff and focusing on decision makers’ accounts
- Deploying applications with full access and applying restrictions based on the need to object
- Enforcing the principle of least privilege
Question 2
What is one primary operational challenge associated with using cloud-agnostic container strategies?
- Limiting deployment to a single cloud service
- Establishing identity and access management protocols
- Reducing the amount of cloud storage used
- Management plane compatibility and consistent controls
Question 3
How can the use of third-party libraries introduce supply chain risks in software development?
- They are usually open source and do not require vetting
- They might contain vulnerabilities that can be exploited
- They fail to integrate properly with existing continuous integration pipelines
- They might increase the overall complexity of the codebase
Question 4
Which aspect is most important for effective cloud governance?
- Establishing a governance hierarchy
- Implementing best-practice cloud security control objectives
- Formalizing cloud security policies
- Negotiating SLAs with cloud providers
Question 5
What are the essential characteristics of cloud computing as defined by the NIST model?
- Resource sharing, automated recovery, universal connectivity, distributed costs, fair pricing
- High availability, geographical distribution, scaled tenancy, continuous resourcing, market pricing
- On-demand self-service, broad network access, resource pooling, rapid elasticity, measured service
- Equal access to dedicated hosting, isolated networks, scalability resources, and automated continuous provisioning