Question 1

A company deploys a hybrid cloud architecture where part of their infrastructure is on-premises and part resides in a public cloud. Which of the following traffic patterns represents an east-west flow in this hybrid environment?

Options :

A : A customer accesses the company-s e-commerce website hosted in the public cloud.

B : A developer pushes application updates from their local machine to a cloud-based Git repository.

C : An on-premises Active Directory server synchronizes user credentials with a cloud-based identity provider.

D : A web application in the public cloud communicates with a backend database server hosted on the same cloud provider.

Answer: D

Question 2

In the context of the cloud shared responsibility model, which of the following scenarios best illustrates a misunderstanding of security responsibilities when using Infrastructure as a Service (IaaS)?

Options :

A : The customer encrypts sensitive data stored on the cloud.

B : The CSP implements multi-factor authentication (MFA) for access to its management console.

C : The customer assumes the CSP is responsible for securing access to their virtual machines.

D : The CSP maintains physical security and prevents unauthorized access to data centers.

Answer: C

Question 3

An organization implements a new cloud-based collaboration platform. The SOC team notices a lack of visibility into activities on the platform, increasing the risk of data breaches. What should the SOC team prioritize to improve visibility in this context?

Options :

A : Use native security features of the collaboration platform, such as logging and monitoring APIs.

B : Increase the number of access controls to limit platform usage.

C : Rely on employee reports to detect suspicious activity on the platform.

D : Monitor only administrative accounts to save on resource usage.

Answer: A

Question 4

Which of the following best describes a typical behavior of spyware?

Options :

A : Collects sensitive information from the victim-s device and sends it to a third party.

B : Encrypts files on the victim-s device and demands payment for their release.

C : Deletes critical system files to render the device inoperable.

D : Exploits vulnerabilities in a device to install additional malware without user consent.

Answer: A

Question 5

Which of the following tools is most commonly used for cloud orchestration and aligns with cloud security best practices?

Options :

A : Splunk

B : Terraform

C : Wireshark

D : Postman

Answer: B