Cloud Governance & Shared Responsibility Quiz

1. In cloud governance, what does 'compliance' primarily refer to?

Adhering to laws, regulations, and organizational policies

Increasing cloud processing speed

Reducing the number of cloud services used

Automating all administrative tasks

Submit

3. Which framework provides guidance on information security management for cloud organizations?

ISO 27001

NIST Cybersecurity Framework

Both ISO 27001 and NIST Cybersecurity Framework

Neither—no established frameworks exist

4. What is the primary function of a cloud governance policy?

To establish rules for acceptable cloud resource usage and security practices

To automatically backup all cloud data

To eliminate the need for user authentication

To reduce the cost of cloud subscriptions

Submit

6. Which of the following best describes a Service Level Agreement (SLA) in cloud computing?

A contract defining expected service availability and performance guarantees

A tool for managing user passwords

A method for encrypting data in transit

A strategy for reducing cloud bandwidth usage

7. True or False: Cloud providers are solely responsible for ensuring customer data is protected against all security threats.

True

False

8. What is the primary goal of implementing encryption in cloud storage?

To reduce storage costs

To protect data confidentiality from unauthorized access

To improve data transfer speed

To eliminate the need for backups

9. Which cloud provider responsibility includes maintaining network infrastructure and preventing unauthorized access to data centers?

Application development

Physical and infrastructure security

User authentication mechanisms

Data classification and tagging

10. True or False: Data residency requirements allow organizations to specify where their cloud data is physically stored.

True

False

11. In the shared responsibility model, which of the following is typically the cloud provider's responsibility?

Application security and data encryption

Physical infrastructure security and hypervisor management

User access control and identity management

Data backup and disaster recovery planning

12. Which of the following is a key component of a cloud security audit?

Reviewing access logs and user activities

Purchasing additional cloud storage

Changing all user passwords monthly

Disabling all API endpoints

13. What is the primary benefit of implementing role-based access control (RBAC) in cloud environments?

It eliminates the need for passwords

It ensures users have only the permissions necessary for their role

It automatically encrypts all data

It reduces cloud subscription costs

14. True or False: Multi-factor authentication is optional for cloud accounts with administrative privileges.

True

False

15. Which compliance standard is most commonly required for healthcare organizations using cloud services?

HIPAA

PCI DSS

SOC 2

ISO 27001

16. What is the primary purpose of a Cloud Access Security Broker (CASB)?

To monitor and enforce security policies between users and cloud applications

To manage physical data center locations

To encrypt all data at the network perimeter

To reduce latency in cloud communications

17. Which of the following best describes a governance framework in cloud computing?

A set of rules defining how cloud resources are allocated and managed

A tool for encrypting data in transit

A backup solution for disaster recovery

A method for reducing cloud costs

18. True or False: In a SaaS model, the customer is responsible for managing the underlying cloud infrastructure.

True

False

19. Which cloud service model places the most responsibility on the customer for security and compliance?

Software as a Service (SaaS)

Platform as a Service (PaaS)

Infrastructure as a Service (IaaS)

Function as a Service (FaaS)

20. What does the acronym GDPR stand for in the context of cloud compliance?

Global Data Privacy Regulation

General Data Protection Regulation

Government Data Processing Requirements

Global Digital Privacy Rule

Cloud Essentials+ Shared Responsibility for Governance Quiz

1. In cloud governance, what does 'compliance' primarily refer to?

2.

What first name or nickname would you like us to use?

2. A cloud customer is responsible for ____ of their applications and data within a cloud environment.

3. Which framework provides guidance on information security management for cloud organizations?

4. What is the primary function of a cloud governance policy?

5. In cloud governance, the principle of 'least privilege' means granting users ____.

6. Which of the following best describes a Service Level Agreement (SLA) in cloud computing?

7. True or False: Cloud providers are solely responsible for ensuring customer data is protected against all security threats.

8. What is the primary goal of implementing encryption in cloud storage?

9. Which cloud provider responsibility includes maintaining network infrastructure and preventing unauthorized access to data centers?

10. True or False: Data residency requirements allow organizations to specify where their cloud data is physically stored.

11. In the shared responsibility model, which of the following is typically the cloud provider's responsibility?

12. Which of the following is a key component of a cloud security audit?

13. What is the primary benefit of implementing role-based access control (RBAC) in cloud environments?

14. True or False: Multi-factor authentication is optional for cloud accounts with administrative privileges.

15. Which compliance standard is most commonly required for healthcare organizations using cloud services?

16. What is the primary purpose of a Cloud Access Security Broker (CASB)?

17. Which of the following best describes a governance framework in cloud computing?

18. True or False: In a SaaS model, the customer is responsible for managing the underlying cloud infrastructure.

19. Which cloud service model places the most responsibility on the customer for security and compliance?

20. What does the acronym GDPR stand for in the context of cloud compliance?