Question 1

An organization is migrating its infrastructure to the cloud. During the migration, the security team identifies several challenges related to securing the cloud environment. Which of the following are valid cloud security challenges? (Choose two)

Options :

A : Shared responsibility model misunderstandings.

B : Lack of centralized visibility across multiple cloud platforms.

C : Lack of compliance regulations for cloud service providers.

D : Cloud environments being immune to insider threats.

E : The inability to encrypt data stored in the cloud.

Answer: A,B

Question 2

Where is the optimal placement of a next-generation firewall (NGFW) in a containerized environment to ensure effective security for container workloads?

Options :

A : Directly between the host operating system and the container runtime.

B : Directly connected to the underlying hardware running containerized workloads.

C : At the edge of the Kubernetes cluster to inspect ingress and egress traffic.

D : Inside each container to monitor traffic at the application level.

Answer: C

Question 3

A financial services company experiences frequent phishing attacks targeting its employees. The security team struggles with slow response times due to manual processes for alert triage and remediation. How can implementing a SOAR platform address these challenges? (Choose two)

Options :

A : Prevents phishing emails from reaching employees by scanning all incoming emails in real time.

B : Coordinates and integrates with email security tools to streamline phishing incident response.

C : Automatically analyzes and prioritizes phishing alerts based on predefined risk criteria.

D : Guarantees complete eradication of all phishing threats from the organization.

E : Automates the process of isolating affected accounts and notifying impacted employees.

Answer: B,C

Question 4

Which of the following is a primary characteristic of an Advanced Persistent Threat (APT)?

Options :

A : Targeted and prolonged attacks on specific organizations

B : Exclusive focus on financial institutions for monetary gain

C : Use of automated malware without human intervention

D : Quick and opportunistic attacks to steal data

Answer: A

Question 5

When designing a secure serverless function to process sensitive data, which of the following practices should be followed to ensure compliance with data protection standards?

Options :

A : Leverage environment variables to pass sensitive data securely to the serverless function.

B : Enable logging and store logs containing sensitive data in a public S3 bucket for auditing purposes.

C : Allow functions to dynamically fetch sensitive data from unencrypted third-party APIs.

D : Deploy serverless functions without any form of input validation to maximize performance.

Answer: A