Cloud Security Troubleshooting: Fix Security Issues

1. A cloud application logs show repeated failed authentication attempts. What should be investigated?

Brute force attack or credential stuffing

Normal user behavior variation

Scheduled backup processes

Routine system updates

2. Which cloud security monitoring capability detects anomalous user behavior?

User and Entity Behavior Analytics (UEBA)

DNS filtering

Web caching

Load balancing

3. A cloud infrastructure change causes a security group misconfiguration. How should this be prevented?

Implement change management and infrastructure-as-code reviews

Manually verify all changes hourly

Disable automated deployments

Use only legacy infrastructure

4. What is the primary risk of using default credentials in cloud services?

Attackers can easily gain unauthorized access

Applications consume more memory

Network latency increases

Backup processes slow down

5. A cloud application experiences data exfiltration. What monitoring tool helps detect this?

Data Loss Prevention (DLP) and network monitoring

Email spam filters

Disk defragmentation tools

CPU usage monitors

6. Which authentication method is most resistant to phishing attacks?

Hardware security keys with MFA

Password-only authentication

Security questions

Email verification links

7. A cloud database backup contains sensitive data. What is the best security practice?

Encrypt backups and restrict access

Store backups in public cloud buckets

Delete sensitive data before backup

Never back up sensitive data

8. What vulnerability exists when API keys are hardcoded in source code?

Keys can be exposed in version control history

Applications run slower

Encryption becomes impossible

Database connections fail

9. A cloud resource is compromised. What is the correct incident response sequence?

Detect, contain, eradicate, recover, document

Delete, restore, test, deploy

Ignore, monitor, patch, update

Notify, delete, restore, resume

10. Which compliance framework is most relevant to cloud security audits?

ISO 27001 and SOC 2

HTML5 standards

REST API specifications

JavaScript libraries

11. A cloud application fails to enforce multi-factor authentication. What is the primary security risk?

Unauthorized access through credential compromise

Increased latency in user login

Higher cloud storage costs

Reduced application performance

12. What is the primary benefit of implementing least privilege access?

Reduces the blast radius of compromised accounts

Eliminates the need for encryption

Improves application performance

Reduces storage costs

13. A cloud administrator discovers a DDoS attack. What is the appropriate first response?

Contact the cloud provider's DDoS mitigation team

Immediately delete the application

Manually block all traffic

Wait to see if it resolves on its own

14. Which cloud service model has the most shared security responsibility?

Infrastructure as a Service (IaaS)

Platform as a Service (PaaS)

Software as a Service (SaaS)

All models share equally

15. A legacy application requires unencrypted database connections. What is the best mitigation?

Allow unencrypted traffic on the network

Use a VPN or encrypted tunnel for connections

Disable SSL/TLS verification

Migrate to a cloud-native application

16. What does a security group do in a cloud environment?

Manages user passwords and credentials

Controls inbound and outbound network traffic

Encrypts data at rest

Monitors application performance

17. A database experiences unauthorized access. What is the first investigation step?

Review access logs and authentication records

Immediately shut down the database

Restore from the oldest backup

Disable all user accounts

18. Which IAM misconfiguration allows privilege escalation?

Overly permissive wildcard policies

Requiring strong password complexity

Enabling CloudTrail logging

Using service-specific roles

19. A cloud storage bucket is accidentally set to public. What should be the immediate remediation step?

Enable versioning on the bucket

Change the bucket permissions to private

Implement lifecycle policies

Add encryption after the fact

20. Which encryption method is most vulnerable to man-in-the-middle attacks in transit?

TLS 1.3 with AES-256

Unencrypted HTTP traffic

SHA-256 hashing

RSA-2048 key exchange

Cloud Security Fix Quiz: Can You Close the Gap?