Cloud Compliance (Cloud+) Quiz for College

1. In cloud compliance, what does 'encryption in transit' mean?

Data encrypted only when moving between continents

Data encrypted while being transmitted over networks

Data encrypted during backup processes

Data encrypted only in the user's office

2. Which of the following best describes a compliance gap analysis?

A marketing strategy for cloud services

An assessment identifying differences between current and required compliance standards

A method to reduce cloud expenses

A process to eliminate all security measures

3. What is a primary challenge in maintaining compliance across hybrid cloud environments?

Standardizing compliance policies across on-premises and cloud infrastructure

Using too few security tools

Avoiding all regulatory requirements

Limiting user access completely

4. Which compliance documentation is essential for demonstrating cloud security practices?

Marketing materials

Security policies, audit logs, and compliance certifications

Employee social media accounts

Internal email archives

5. What does 'data sovereignty' require in cloud compliance?

Data ownership by the cloud provider

Data storage and processing within specific jurisdictions per legal requirements

Unlimited global data sharing

Encryption only during business hours

6. Which of the following is a critical element of cloud access control compliance?

Sharing passwords across teams

Implementing role-based access control (RBAC)

Allowing unrestricted administrative access

Disabling all authentication methods

7. What is the purpose of a compliance baseline in cloud environments?

To establish minimum security and compliance standards

To reduce the number of users

To eliminate the need for testing

To increase data processing speed

8. Which practice helps ensure compliance when using multiple cloud providers?

Avoiding documentation

Multi-cloud governance and standardized compliance policies

Using only one provider to simplify compliance

Eliminating all compliance checks

9. What is a primary benefit of implementing a cloud compliance framework?

Elimination of all cybersecurity threats

Reduced operational costs with guaranteed security

Demonstrated commitment to regulatory requirements and risk management

Automatic approval for all business operations

10. Which compliance standard is most relevant for organizations processing payment card data in the cloud?

GDPR

HIPAA

PCI DSS

SOX

11. Which regulation primarily governs the protection of personal data for EU residents?

HIPAA

GDPR

PCI DSS

SOC 2

12. What does FedRAMP certification ensure for cloud providers?

Compliance with federal security standards for government use

Free access to federal databases

Immunity from security audits

Automatic GDPR compliance

13. Which of the following is a key component of SOC 2 compliance?

Network speed requirements

Trust Service Criteria covering security, availability, and confidentiality

Maximum data storage limits

Mandatory encryption algorithms

14. What is the primary goal of a Data Processing Agreement (DPA) in cloud contracts?

To reduce cloud service fees

To define data processing responsibilities and compliance obligations

To eliminate the need for audits

To transfer all liability to the user

15. Data residency requirements typically mandate that data be stored in which location?

Any cloud region globally

A specific geographic region or country

The provider's headquarters

Multiple countries simultaneously

16. Which compliance framework is specifically designed for cloud service providers?

ISO 27001

CSA STAR

NIST Cybersecurity Framework

FedRAMP

17. What does PCI DSS stand for?

Payment Card Industry Data Security Standard

Personal Computer Interface Data System Standard

Private Cloud Infrastructure Design Standard

Public Compliance Initiative Data Specification

18. HIPAA compliance is critical for organizations handling which type of data?

Financial records

Protected health information

Credit card numbers

Intellectual property

19. Which of the following is a responsibility of the cloud provider under the shared responsibility model?

Application security

Data encryption by the user

Physical security of data centers

User access management

20. What is the primary purpose of a cloud compliance audit?

To reduce cloud costs

To verify adherence to regulatory requirements and standards

To increase processing speed

To eliminate all security risks

Cloud Compliance Quiz: Can You Meet the Standard?