Cloud Security (Security+) Quiz: CASB, Containers, IAM

1. What vulnerability scanning should be performed on container images?

Regular scans for known vulnerabilities in dependencies

Scans only at deployment time

No scanning is necessary

Scans performed annually

2. Which security compliance standard is most relevant for cloud environments?

ISO 27001 and SOC 2 for cloud security and data protection

Only internal company policies

No compliance is required

Only network security standards

3. What is the difference between authentication and authorization in cloud IAM?

Authentication verifies identity; authorization grants permissions

They are the same process

Authorization happens before authentication

Only authentication is needed for security

4. How does cloud security monitoring detect threats?

Continuous analysis of logs and network traffic for suspicious activity

Manual reviews conducted annually

Relying solely on user reports

No monitoring is necessary

5. What is secret management in cloud environments?

Secure storage and rotation of credentials and API keys

Keeping all secrets written in plaintext files

Sharing secrets across all team members

Storing secrets in version control systems

6. Which of the following is a best practice for container orchestration security?

Use network policies and RBAC to control container access

Disable all security features for performance

Use default credentials for all containers

Allow unrestricted communication between containers

7. What is the purpose of a Web Application Firewall (WAF) in cloud security?

Protect web applications from common attacks like SQL injection

Replace all other security measures

Reduce cloud hosting costs

Manage user passwords

8. How do identity providers (IdP) function in cloud IAM?

Authenticate users and provide identity information to applications

Store all user passwords in plaintext

Eliminate the need for authentication

Manage only network traffic

9. What is data exfiltration in cloud security contexts?

Unauthorized transfer of sensitive data outside the organization

Normal data backup to cloud storage

Encrypted data transmission

Data compression techniques

10. Which protocol is recommended for secure API communication in cloud services?

HTTPS with TLS encryption

HTTP without encryption

FTP for all transfers

Unencrypted TCP connections

11. What is the primary function of a Cloud Access Security Broker (CASB)?

Monitor and control user access to cloud applications and data

Encrypt all data stored in public cloud environments

Manage virtual machine provisioning in the cloud

Replace traditional firewalls entirely

12. How do role-based access controls (RBAC) enhance cloud security?

Assign permissions based on job function or role

Grant all users administrative access

Remove all authentication requirements

Simplify password management

13. What is a zero-trust security model in cloud environments?

Never trust any user or device; verify every access request

Trust all users within the corporate network

Eliminate all security measures

Use only perimeter-based security

14. Which cloud deployment model offers the highest level of security control?

Private cloud

Public cloud

Community cloud

Hybrid cloud

15. What is the shared responsibility model in cloud security?

Cloud provider and customer both have security obligations

Only the cloud provider is responsible for security

Only the customer is responsible for security

Security is not a shared concern

16. How does encryption protect data in cloud environments?

It converts plaintext into unreadable ciphertext using cryptographic keys

It prevents unauthorized network access

It eliminates the need for firewalls

It reduces cloud storage costs

17. What does the principle of least privilege mean in IAM?

Users receive only the minimum permissions needed for their role

All users have equal access rights

Administrative privileges are shared among all users

Guest accounts have full system access

18. Which of the following is a primary security concern for containerized applications?

Image vulnerabilities and supply chain attacks

Container color coding

Container size limitations

Operating system version compatibility

19. What is a container in cloud computing?

A lightweight, standalone executable package with code and dependencies

A physical storage device for cloud backups

A virtual machine running on a hypervisor

A network storage solution

20. Which authentication method is most secure for cloud IAM systems?

Single sign-on (SSO) with multi-factor authentication (MFA)

Username and password only

IP address whitelisting

Security questions

Cloud Security Quiz: Can You Master CASB, Containers & IAM?