stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cloud Fundamentals Review Flashcards | StudBud
Explore
/
Cloud Fundamentals Review
Cloud Fundamentals Review
40 terms
·
StudBud Administration
·
29 plays
Exam review questions for the Cloud Security bootcamp exam.
Flashcards
40 cards
F
Practice quiz
P
Host live
L
Questions
40
Answers
1
Which AWS networking service enables a company to create a virtual network within AWS?
Amazon Virtual Private Cloud (Amazon VPC)
Amazon Route 53
AWS Direct Connect
AWS Config
2
What is Virtualization?
Separation between software and hardware
The ability to create logical computer resources
A pseudo approach to computer systems
The ability to store information online
3
Which is the most appropriate option to attach as a "virtual hard drive" to your EC2 instance?
RDS
EBS
S3
DDB
4
Why is AWS more economical compared to traditional data centers for varying compute workloads?
Amazon EC2 instances can be launched on demand when needed.
Users can permanently run enough instances to handle peak workloads.
Users retain full administrative access to their Amazon EC2 instances.
Amazon EC2 costs are billed on a monthly basis.
5
Which is an example of a Type 2 Hypervisor?
Virtualbox
VMware ESXi
Citrix Server
Microsoft Hyper-V
6
Which of these models allows full control over the operating system with no responsibility for physical infrastructure?
IaaS
DRaaS
PaaS
SaaS
7
True or False: Clients do NOT know which physical server their data is located on.
True
False
8
What do we mean by "off-premise"?
Secure computing
Work from home
Remote or in another location
Hosting servers in a server closet
9
Which of the following is a benefit of using SECaaS?
There is no need to maintain a dedicated security team
Improved storage options
It is more transparent to the organization
Checks a box on a compliance checklist
10
Which of the following is a primary reason why the cloud is considered a great solution?
Increased complexity
Scalability & Flexibility
Ownership
Server location & maintenance
11
What does EC2 mean?
Elastic Cloud Compute
Electronic Compute Cluster
Elastic Cloud Cluster
Elastic Compute Client
12
CloudFront is what type of Internet service?
NTP
WAF
CDN
SDN
13
Which is the primary concern with cloud security?
Data breaches
Deterrent controls
DDoS attacks
Too many regions
14
Who is responsible for guest OS security in an IaaS model?
The customer
The IT department
The end user
The cloud provider
15
I am going to pass my Cloud Security exam.
False
True
16
You have just created an S3 bucket and uploaded a file into it. Will this be viewable by anyone on the internet?
Only with a NAT gateway.
No. By default S3 buckets are private.
Only with a load-balancer configured.
Yes. By default S3 buckets are public.
17
Which of these EC2 instance types provides the most memory?
r4.4xlarge
d2.2xlarge
c4.4xlarge
t2.micro
18
What should you consider when migrating to the cloud?
Performance requirements
Migration order
Licensing
All of these
19
IAM is defined as:
Infosec Authorization Management
Identity and Access Management
Identification Automation Manager
Information Authority Manager
20
Which cloud service requires the customer to have the most responsibility?
SECaaS
SaaS
IaaS
PaaS
21
The boss decided to migrate the company to cloud computing. What could be the
main
purpose of this decision?
Providing access to the internet
Increasing computing capabilities
Securing access to the internet
Hosting services off-premises
22
What is the concept of multi-tenancy?
To separate hardware resources
To create VMs on a computer
Provice enhanced computing capabilities
Provide services to multiple customers with shared resources
23
Why is PaaS an excellent solution for development purposes?
PaaS is faster than a DRaaS
It acts as a great failover solution
PaaS can host my virtual machine
Removes the need for platform maintenance
24
What is the role of a CASB?
To control the CDN resources
To act as a gatekeeper and monitor
To implement stealth cloud tech
Cloud Security Authentication Backend
25
True or False: We use Containers in the same way we use Virtual Machines.
True
False
26
What is the purpose of AWS security groups?
To block RDP connections to AWS instances
To separate users into logical groups
Manage multiple users with a single account
To configure network access controls in AWS
27
Which of the following is NOT a core pillar of a software-defined perimeter?
Identity Centric Design
Zero Trust
Convenience
Built for the cloud
28
What is required to build and run containers?
Containers only run in the cloud.
Hypervisor
Linux operating system
Container agent
29
Cloud services always have 100% uptime.
True
False
30
Which of the following is NOT a method of securing data in the cloud?
Setting up a DLP system
Preventing all remote access
Implementing a CASB
Using URL filtering tools
31
A Service Control Policy (SCP) never grants permissions.
True
False
32
Which of these are container tools?
Virtualbox
Kubernetes
Docker
Vagrant
33
Who is responsible for securing the Cloud’s physical infrastructure?
The end user
The customer
Clients using on-premise services
The Cloud provider
34
Which of the following is an AWS responsibility under the AWS shared responsibility model?
Maintaining physical hardware
Configuring third-party applications
Managing guest operating systems
Securing application access and data
35
Which component of the AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery?
AWS Regions
Edge Locations
Availability Zones
Virtual Private Cloud (VPC)
36
Which of the following are AWS compute services?
Lambda
CloudFront
CloudTrail
EC2
37
Which of these methods is used as a PREVENTATIVE control?
Resetting all services
Implementing tresspass alarms
Strong user authentication
Responding to a security incident
38
What does the acronym SDN represent?
Special Device Node
Software Delivery Network
Seriously Dented Ninjas
Software Defined Network
39
The cloud based storage service, S3, stands for what?
Super Simple Storage
Simple Storage Service
Seriously Simple Storage
Storage Service made Simple
40
S3 is which type of service?
Network
Storage
Memory
Compute
