Cloud+ V3 Compliance Fundamentals

1. Which principle requires organizations to document their compliance efforts and maintain audit trails?

Accountability

Confidentiality

Availability

Integrity

2. Which standard framework helps organizations identify and manage cybersecurity risks?

ISO/IEC 27001

NIST Cybersecurity Framework

Cloud Security Alliance guidelines

All of the above

3. What is the primary objective of access control policies in cloud compliance?

Ensure only authorized users access appropriate cloud resources

Maximize cloud resource utilization

Reduce cloud infrastructure costs

Simplify user account management

4. Which control addresses security incidents after they occur?

Preventive control

Detective control

Corrective control

Compensating control

5. In cloud compliance, what is the significance of a shared responsibility model?

It clarifies security obligations between cloud providers and customers

It eliminates the need for customer security controls

It transfers all compliance responsibility to vendors

It reduces compliance costs for organizations

6. What does CCPA primarily protect?

California residents' personal information privacy rights

Federal government data security

International data transfer protocols

Cloud provider licensing requirements

7. Which compliance requirement mandates regular security assessments and vulnerability testing?

Change management policy

Penetration testing and vulnerability scanning requirements

Data retention policy

Network bandwidth allocation

8. What is the purpose of encryption key management in cloud compliance?

Reduce data transfer latency

Ensure secure generation, storage, and rotation of encryption keys

Increase cloud storage capacity

Simplify user authentication

9. Which framework provides guidelines for managing information security risks?

NIST Cybersecurity Framework

AWS Pricing Model

Cloud Storage API

DevOps Pipeline Framework

10. What is a Business Continuity Plan (BCP) essential for in cloud compliance?

Establishing disaster recovery and operational resilience procedures

Managing employee payroll systems

Optimizing cloud bandwidth usage

Selecting cloud infrastructure providers

11. Which compliance framework is most commonly used to assess information security controls in cloud environments?

ISO/IEC 27001

NIST SP 800-53

PCI DSS

HIPAA

12. What does SOC 2 compliance primarily evaluate?

Payment processing security

Service organization controls over security, availability, and confidentiality

European data protection laws

Healthcare compliance requirements

13. Which control type focuses on preventing unauthorized access to cloud resources?

Detective control

Preventive control

Corrective control

Compensating control

14. What is the primary goal of data classification in cloud compliance?

Reduce cloud storage costs

Categorize data by sensitivity to apply appropriate protection controls

Increase data processing speed

Simplify cloud vendor selection

15. Which compliance standard specifically addresses healthcare data security?

HIPAA

SOX

GDPR

PCI DSS

16. What is data residency in the context of cloud compliance?

The physical location where data is stored and processed

The encryption algorithm used for data protection

The frequency of data backups

The number of data copies maintained

17. Which of the following is a key component of a cloud compliance audit?

Verification of regulatory adherence and control effectiveness

Determination of cloud provider pricing

Selection of backup hardware vendors

Configuration of user desktop settings

18. What does PCI DSS primarily regulate?

Payment card industry data security

Healthcare information privacy

Cloud storage encryption

Employee access controls

19. Which regulation specifically protects the personal data of European Union residents?

CCPA

GDPR

SOC 2

NIST Cybersecurity Framework

20. What is the primary purpose of a Service Level Agreement (SLA) in cloud computing?

Define security vulnerability management procedures

Establish performance expectations and remedies for service failures

Outline encryption key rotation schedules

Describe customer billing increments

Cloud+ V3 Cloud Compliance Fundamentals Quiz

1. Which principle requires organizations to document their compliance efforts and maintain audit trails?

2.

What first name or nickname would you like us to use?

2. Which standard framework helps organizations identify and manage cybersecurity risks?

3. What is the primary objective of access control policies in cloud compliance?

4. Which control addresses security incidents after they occur?

5. In cloud compliance, what is the significance of a shared responsibility model?

6. What does CCPA primarily protect?

7. Which compliance requirement mandates regular security assessments and vulnerability testing?

8. What is the purpose of encryption key management in cloud compliance?

9. Which framework provides guidelines for managing information security risks?

10. What is a Business Continuity Plan (BCP) essential for in cloud compliance?

11. Which compliance framework is most commonly used to assess information security controls in cloud environments?

12. What does SOC 2 compliance primarily evaluate?

13. Which control type focuses on preventing unauthorized access to cloud resources?

14. What is the primary goal of data classification in cloud compliance?

15. Which compliance standard specifically addresses healthcare data security?

16. What is data residency in the context of cloud compliance?

17. Which of the following is a key component of a cloud compliance audit?

18. What does PCI DSS primarily regulate?

19. Which regulation specifically protects the personal data of European Union residents?

20. What is the primary purpose of a Service Level Agreement (SLA) in cloud computing?