Cloud Security Essentials (C|SE)

0/8 checked

Q_01 domain/d1 · medium single discuss →

A new cloud analyst is confused about who is accountable for securing different layers of a cloud deployment. According to the foundational cloud security concepts, which statement best describes how security responsibility is divided between a customer and a third-party provider such as AWS, Azure, or GCP?

A The provider secures all data and application code, leaving only physical access to the customer
B The provider manages the physical infrastructure, while the customer retains responsibility for data assets and, depending on the service model, elements like application code
C The customer is fully responsible for the physical data centers, and the provider only secures the network
D Responsibility is identical across all service models, with the customer owning nothing beyond user accounts

Q_02 domain/d1 · medium single discuss →

A hiring manager reads that cloud security is described as a 'branch of cyber security dedicated to securing a cloud computing environment.' Based on the stated aim of a cloud security program, which combination of goals should a candidate be able to articulate?

A Maximizing storage costs, increasing latency, and centralizing all identities
B Protecting data, managing access, and ensuring business continuity to reduce the threat from malicious actors
C Eliminating the need for the customer to configure any security controls
D Transferring all legal and compliance obligations to the cloud service provider