Cloud+ V3 Encryption at Rest and in Transit

1. What does the term 'cipher suite' refer to in TLS connections?

A combination of encryption, authentication, and key exchange algorithms

A set of passwords used for authentication

A collection of digital certificates

A list of authorized cloud users

2. In cloud environments, what is the benefit of using HTTPS with TLS 1.3?

Faster handshakes, stronger encryption, and improved security

Slower connections but better data compression

Elimination of the need for digital certificates

Automatic backup of encrypted data

3. Which of the following is NOT a responsibility of a cloud provider regarding encryption?

Managing encryption keys for customer data on behalf of the customer

Providing encryption capabilities for data at rest

Offering TLS for data in transit

Maintaining infrastructure security

4. What does 'data at rest' refer to in cloud security?

Data stored on cloud servers or storage devices

Data being transmitted over the network

Data in the user's local cache

Data temporarily held in RAM

5. Which key size is recommended for RSA encryption in modern cloud security implementations?

2048 bits or higher

512 bits

1024 bits

256 bits

6. In cloud security, what is the purpose of certificate pinning?

Prevents man-in-the-middle attacks by validating specific certificates

Encrypts data using multiple algorithms simultaneously

Stores backup copies of encryption keys

Monitors bandwidth consumption on the network

7. What is the primary purpose of Perfect Forward Secrecy (PFS) in TLS?

Ensures session keys are not compromised even if long-term keys are stolen

Increases the speed of encryption operations

Eliminates the need for digital certificates

Reduces the size of encrypted files

8. Which protocol is specifically designed for secure remote access and file transfer in cloud environments?

SSH (Secure Shell)

Telnet

FTP (File Transfer Protocol)

SMTP

9. In cloud storage, what does envelope encryption accomplish?

Uses a master key to encrypt data encryption keys, adding a layer of security

Compresses encrypted files to save storage space

Allows users to decrypt data without authentication

Prevents data from being accessed by cloud providers

10. Which encryption standard is considered obsolete and should not be used for cloud data protection?

DES (Data Encryption Standard)

AES-256

ChaCha20

RSA-4096

11. Which encryption standard is most commonly used for protecting data at rest in cloud storage?

AES-256

DES

MD5

SHA-1

12. Which of the following is a best practice for encryption key management?

Store keys separately from encrypted data

Use the same key for all encryption operations

Store keys in plaintext for easy access

Share keys with all team members

13. In cloud security, what does a certificate authority (CA) do?

Issues and verifies digital certificates for servers and services

Encrypts all data stored in the cloud

Manages user access permissions

Monitors network bandwidth usage

14. What is the main vulnerability addressed by using HTTPS instead of HTTP?

Data transmitted over the network is unencrypted

The server cannot process requests fast enough

User authentication is not required

The database cannot store large files

15. Which encryption method protects data while it resides on cloud storage servers?

Encryption at rest

Encryption in transit

End-to-end encryption

Application-layer encryption

16. What is a key management service (KMS) primarily responsible for in cloud environments?

Creating, storing, and managing encryption keys

Compressing encrypted data

Monitoring user login attempts

Backing up cloud databases

17. Which protocol is the successor to SSL and is now the standard for securing web traffic?

TLS 1.3

HTTPS 2.0

SSH Protocol

IPSec v2

18. In cloud security, what is the primary advantage of using asymmetric encryption for key exchange?

It eliminates the need for secure key distribution

It is faster than symmetric encryption

It requires less storage space

It is easier to implement than symmetric encryption

19. Which of the following best describes the purpose of a digital certificate?

Verify the identity of a server and enable encrypted communication

Store encryption keys on a hard drive

Compress data before transmission

Monitor network traffic patterns

20. What does TLS stand for in the context of data in transit?

Transport Layer Security

Trusted Link Standard

Transfer Limit Specification

Transmission Level Standard

Cloud+ V3 Encryption at Rest and in Transit Quiz