CCSP Cloud Infrastructure Security Controls Quiz

1. What is the primary purpose of implementing encryption at rest in cloud storage?

To prevent data loss during transmission

To protect data confidentiality when stored on cloud servers

To improve data retrieval speed

To reduce storage costs

2. Which cloud service model gives customers the most responsibility for security controls?

Software as a Service (SaaS)

Platform as a Service (PaaS)

Infrastructure as a Service (IaaS)

Database as a Service (DBaaS)

3. A network security group (NSG) or security group in cloud platforms primarily controls what?

User identity verification

Data encryption keys

Inbound and outbound network traffic

Application performance metrics

4. What does RBAC stand for in cloud security contexts?

Restricted Baseline Access Control

Role-Based Access Control

Resource-Based Attribute Control

Regulatory Baseline Access Compliance

5. Which encryption standard is recommended by NIST for protecting classified U.S. government data?

DES (Data Encryption Standard)

AES (Advanced Encryption Standard)

MD5 (Message Digest 5)

SHA-1 (Secure Hash Algorithm 1)

6. True or False: In a public cloud model, the cloud provider is responsible for all security controls.

True

False

7. What is the primary benefit of implementing principle of least privilege (PoLP)?

Reduces administrative overhead

Limits access to only what is necessary for job functions

Increases system performance

Simplifies password management

8. Which framework provides a comprehensive approach to cloud security governance and compliance?

ISO/IEC 27001

NIST Cybersecurity Framework

Cloud Security Alliance CCM

All of the above

9. Which cryptographic function ensures data integrity by producing a fixed-length hash?

Symmetric encryption

Asymmetric encryption

Hashing

Digital signatures

10. Which authentication method combines something you know, something you have, and something you are?

Single-factor authentication

Multi-factor authentication

Role-based access control

Attribute-based access control

11. True or False: Shared responsibility model means the cloud provider is solely responsible for infrastructure security.

True

False

12. Which security control type is implemented before a security event occurs?

Detective controls

Preventive controls

Corrective controls

Compensating controls

13. What is the primary purpose of a cloud access security broker (CASB)?

To manage cloud infrastructure costs

To provide visibility and control over cloud service usage

To automate cloud resource provisioning

To replace traditional firewalls

14. True or False: Certificate pinning is a technique that binds a public key to a specific domain.

True

False

15. Which compliance framework is specifically designed for healthcare data protection?

GDPR (General Data Protection Regulation)

HIPAA (Health Insurance Portability and Accountability Act)

PCI DSS (Payment Card Industry Data Security Standard)

SOC 2 (Service Organization Control 2)

16. What does a Web Application Firewall (WAF) protect against?

Network-layer DDoS attacks

Application-layer attacks like SQL injection and XSS

Malware on endpoint devices

Physical unauthorized access

17. True or False: Data residency requirements allow organizations to store data anywhere in the cloud.

True

False

18. Which of the following is a key component of identity and access management (IAM)?

User authentication and authorization

Account provisioning and de-provisioning

Access review and attestation

All of the above

19. What is a virtual private network (VPN) primarily used for in cloud environments?

Increasing data transfer speed

Creating encrypted tunnels for secure remote access

Reducing cloud infrastructure costs

Automating security patch deployment

20. True or False: Public key infrastructure (PKI) uses a single key for both encryption and decryption.

True

False

CCSP Cloud Infrastructure Security Controls Quiz

1. What is the primary purpose of implementing encryption at rest in cloud storage?

2.

What first name or nickname would you like us to use?

2. Which cloud service model gives customers the most responsibility for security controls?

3. A network security group (NSG) or security group in cloud platforms primarily controls what?

4. What does RBAC stand for in cloud security contexts?

5. Which encryption standard is recommended by NIST for protecting classified U.S. government data?

6. True or False: In a public cloud model, the cloud provider is responsible for all security controls.

7. What is the primary benefit of implementing principle of least privilege (PoLP)?

8. Which framework provides a comprehensive approach to cloud security governance and compliance?

9. Which cryptographic function ensures data integrity by producing a fixed-length hash?

10. Which authentication method combines something you know, something you have, and something you are?

11. True or False: Shared responsibility model means the cloud provider is solely responsible for infrastructure security.

12. Which security control type is implemented before a security event occurs?

13. What is the primary purpose of a cloud access security broker (CASB)?

14. True or False: Certificate pinning is a technique that binds a public key to a specific domain.

15. Which compliance framework is specifically designed for healthcare data protection?

16. What does a Web Application Firewall (WAF) protect against?

17. True or False: Data residency requirements allow organizations to store data anywhere in the cloud.

18. Which of the following is a key component of identity and access management (IAM)?

19. What is a virtual private network (VPN) primarily used for in cloud environments?

20. True or False: Public key infrastructure (PKI) uses a single key for both encryption and decryption.