CCSP Cloud Infrastructure Security Controls Quiz

1. What is a virtual private network (VPN) primarily used for in cloud environments?

Increasing data transfer speed

Creating encrypted tunnels for secure remote access

Reducing cloud infrastructure costs

Automating security patch deployment

2. Which cryptographic function ensures data integrity by producing a fixed-length hash?

Symmetric encryption

Asymmetric encryption

Hashing

Digital signatures

3. True or False: Shared responsibility model means the cloud provider is solely responsible for infrastructure security.

True

False

4. Which security control type is implemented before a security event occurs?

Detective controls

Preventive controls

Corrective controls

Compensating controls

5. What is the primary purpose of a cloud access security broker (CASB)?

To manage cloud infrastructure costs

To provide visibility and control over cloud service usage

To automate cloud resource provisioning

To replace traditional firewalls

6. True or False: Certificate pinning is a technique that binds a public key to a specific domain.

True

False

7. Which compliance framework is specifically designed for healthcare data protection?

GDPR (General Data Protection Regulation)

HIPAA (Health Insurance Portability and Accountability Act)

PCI DSS (Payment Card Industry Data Security Standard)

SOC 2 (Service Organization Control 2)

8. What does a Web Application Firewall (WAF) protect against?

Network-layer DDoS attacks

Application-layer attacks like SQL injection and XSS

Malware on endpoint devices

Physical unauthorized access

9. True or False: Data residency requirements allow organizations to store data anywhere in the cloud.

True

False

10. Which of the following is a key component of identity and access management (IAM)?

User authentication and authorization

Account provisioning and de-provisioning

Access review and attestation

All of the above

11. Which authentication method combines something you know, something you have, and something you are?

Single-factor authentication

Multi-factor authentication

Role-based access control

Attribute-based access control

12. True or False: Public key infrastructure (PKI) uses a single key for both encryption and decryption.

True

False

13. Which framework provides a comprehensive approach to cloud security governance and compliance?

ISO/IEC 27001

NIST Cybersecurity Framework

Cloud Security Alliance CCM

All of the above

14. What is the primary benefit of implementing principle of least privilege (PoLP)?

Reduces administrative overhead

Limits access to only what is necessary for job functions

Increases system performance

Simplifies password management

15. True or False: In a public cloud model, the cloud provider is responsible for all security controls.

True

False

16. Which encryption standard is recommended by NIST for protecting classified U.S. government data?

DES (Data Encryption Standard)

AES (Advanced Encryption Standard)

MD5 (Message Digest 5)

SHA-1 (Secure Hash Algorithm 1)

17. What does RBAC stand for in cloud security contexts?

Restricted Baseline Access Control

Role-Based Access Control

Resource-Based Attribute Control

Regulatory Baseline Access Compliance

18. A network security group (NSG) or security group in cloud platforms primarily controls what?

User identity verification

Data encryption keys

Inbound and outbound network traffic

Application performance metrics

19. Which cloud service model gives customers the most responsibility for security controls?

Software as a Service (SaaS)

Platform as a Service (PaaS)

Infrastructure as a Service (IaaS)

Database as a Service (DBaaS)

20. What is the primary purpose of implementing encryption at rest in cloud storage?

To prevent data loss during transmission

To protect data confidentiality when stored on cloud servers

To improve data retrieval speed

To reduce storage costs

CCSP Cloud Infrastructure Security Controls Quiz

1. What is a virtual private network (VPN) primarily used for in cloud environments?

2.

What first name or nickname would you like us to use?

2. Which cryptographic function ensures data integrity by producing a fixed-length hash?

3. True or False: Shared responsibility model means the cloud provider is solely responsible for infrastructure security.

4. Which security control type is implemented before a security event occurs?

5. What is the primary purpose of a cloud access security broker (CASB)?

6. True or False: Certificate pinning is a technique that binds a public key to a specific domain.

7. Which compliance framework is specifically designed for healthcare data protection?

8. What does a Web Application Firewall (WAF) protect against?

9. True or False: Data residency requirements allow organizations to store data anywhere in the cloud.

10. Which of the following is a key component of identity and access management (IAM)?

11. Which authentication method combines something you know, something you have, and something you are?

12. True or False: Public key infrastructure (PKI) uses a single key for both encryption and decryption.

13. Which framework provides a comprehensive approach to cloud security governance and compliance?

14. What is the primary benefit of implementing principle of least privilege (PoLP)?

15. True or False: In a public cloud model, the cloud provider is responsible for all security controls.

16. Which encryption standard is recommended by NIST for protecting classified U.S. government data?

17. What does RBAC stand for in cloud security contexts?

18. A network security group (NSG) or security group in cloud platforms primarily controls what?

19. Which cloud service model gives customers the most responsibility for security controls?

20. What is the primary purpose of implementing encryption at rest in cloud storage?