PCCET Cloud Security Concepts Quiz

1. Which of the following is a characteristic of cloud security posture management (CSPM)?

Manages physical server security

Identifies and remediates cloud configuration risks

Encrypts all cloud traffic

Manages user password policies

2. What is the primary advantage of implementing encryption for data in cloud storage?

Improves data access speed

Protects data confidentiality even if unauthorized access occurs

Reduces cloud storage costs

Simplifies backup procedures

3. Which security control is essential for detecting and responding to cloud-based threats in real time?

Firewall logging only

Extended Detection and Response (XDR)

Static password policies

Annual security audits

4. True or False: Cloud providers are responsible for securing the customer's application code.

True

False

5. What is the primary goal of data loss prevention (DLP) in cloud security?

Increase data transfer speeds

Prevent unauthorized access and exfiltration of sensitive data

Reduce cloud storage costs

Simplify user authentication

6. Which of the following is NOT a typical cloud security responsibility of the customer?

Managing user access and identity

Maintaining physical data center facilities

Securing application code

Configuring firewall rules

7. True or False: Public cloud environments are inherently less secure than private cloud.

True

False

8. What is the primary purpose of a Security Information and Event Management (SIEM) system?

Manage cloud infrastructure scaling

Collect, analyze, and respond to security events

Encrypt data at the application level

Monitor network bandwidth usage

9. Which cloud security tool monitors for unusual user behavior and potential insider threats?

Web Application Firewall

User and Entity Behavior Analytics (UEBA)

Virtual Private Network

Load balancer

10. What does the principle of least privilege mean in cloud security?

Grant all users administrative access for efficiency

Users should have only the minimum permissions needed

Privileges should be updated frequently

Administrators should have unlimited access

11. Which cloud service model provides the highest level of control and responsibility to the customer?

Software as a Service (SaaS)

Platform as a Service (PaaS)

Infrastructure as a Service (IaaS)

Function as a Service (FaaS)

12. What is the main benefit of implementing network segmentation in cloud environments?

Increases network speed

Isolates critical assets and limits lateral movement of threats

Reduces cloud storage costs

Simplifies user access management

13. Which attack type exploits vulnerabilities in web applications to gain unauthorized access?

DDoS attack

SQL injection

Brute force attack

Man-in-the-middle attack

14. What does multi-factor authentication (MFA) add to the security of cloud accounts?

Stronger password requirements only

Multiple verification methods beyond just a password

Encryption of all cloud data

Automatic threat detection

15. Which compliance framework is specifically designed for healthcare data security in the cloud?

GDPR

HIPAA

PCI-DSS

SOC 2

16. What is the primary role of identity and access management (IAM) in cloud environments?

Monitor network traffic patterns

Control who can access resources and what they can do

Encrypt all data in the cloud

Manage physical server locations

17. Which encryption method protects data while it is being transmitted across networks?

Encryption at rest

Encryption in transit

Application-level encryption

Database encryption

18. What does Zero Trust security architecture assume?

All users and devices are inherently trustworthy

Network perimeter is the primary security boundary

No user or device is trusted by default; verification is required

Only external threats pose security risks

19. Which of the following best describes the shared responsibility model in cloud security?

The cloud provider is solely responsible for all security

Security responsibilities are divided between provider and customer

The customer is entirely responsible for security

Third-party vendors manage all security controls

20. What is the primary purpose of a Web Application Firewall (WAF) in cloud security?

Monitor and log all user activities

Protect web applications from Layer 7 attacks

Encrypt data at rest in cloud storage

Manage user access credentials