CLOUD SECURITY IMPLEMENTATION
PLAN EXAM PREPARATION TEST BANK
WITH CORRECT ANSWERS
●● Does the cloud provider handle every security responsibility in a
SaaS model?
Answer: No, the customer still manages responsibilities such as users,
identities, access permissions, configuration choices, and data.
●● What is the main purpose of a cloud responsibility matrix?
Answer: It identifies which security responsibilities belong to the cloud
provider and which belong to the customer.
●● What architecture is used when a company keeps sensitive databases
in its own datacenter but runs additional workloads in public cloud
resources?
Answer: Hybrid.
●● Why can a third-party cloud vendor increase security risk?
Answer: The organization becomes dependent on another party's
availability, security practices, and incident handling.
,●● What does transferring infrastructure responsibilities to a cloud
provider illustrate?
Answer: Risk transference.
●● How can Infrastructure as Code (IaC) improve security?
Answer: IaC makes infrastructure repeatable, version-controlled,
reviewable, and consistently deployable.
●● What is a major security danger of Infrastructure as Code?
Answer: A bad template or insecure configuration can be deployed
consistently across many systems.
●● What does serverless computing mean?
Answer: The customer runs code/functions without directly managing
the underlying server infrastructure.
●● What security responsibilities remain with a customer using
serverless computing?
Answer: Application code, permissions, dependencies, configuration,
secrets, and data.
●● What architecture is being used when a large application is divided
into many small independently deployed services?
Answer: Microservices.
, ●● What security challenge commonly increases with microservices?
Answer: The number of service-to-service connections and APIs
increases.
●● What security architecture has no normal network connection to
other systems?
Answer: Physical isolation / air gap.
●● What is the key difference between an air gap and logical
segmentation?
Answer: An air gap uses physical isolation.
●● What is the primary security benefit of logical segmentation?
Answer: It limits unnecessary communication and lateral movement
between systems.
●● What technology allows centralized control of network forwarding
behavior?
Answer: Software-defined networking (SDN).
●● What is an important security implication of SDN?
Answer: The controller can become a high-value target.
PLAN EXAM PREPARATION TEST BANK
WITH CORRECT ANSWERS
●● Does the cloud provider handle every security responsibility in a
SaaS model?
Answer: No, the customer still manages responsibilities such as users,
identities, access permissions, configuration choices, and data.
●● What is the main purpose of a cloud responsibility matrix?
Answer: It identifies which security responsibilities belong to the cloud
provider and which belong to the customer.
●● What architecture is used when a company keeps sensitive databases
in its own datacenter but runs additional workloads in public cloud
resources?
Answer: Hybrid.
●● Why can a third-party cloud vendor increase security risk?
Answer: The organization becomes dependent on another party's
availability, security practices, and incident handling.
,●● What does transferring infrastructure responsibilities to a cloud
provider illustrate?
Answer: Risk transference.
●● How can Infrastructure as Code (IaC) improve security?
Answer: IaC makes infrastructure repeatable, version-controlled,
reviewable, and consistently deployable.
●● What is a major security danger of Infrastructure as Code?
Answer: A bad template or insecure configuration can be deployed
consistently across many systems.
●● What does serverless computing mean?
Answer: The customer runs code/functions without directly managing
the underlying server infrastructure.
●● What security responsibilities remain with a customer using
serverless computing?
Answer: Application code, permissions, dependencies, configuration,
secrets, and data.
●● What architecture is being used when a large application is divided
into many small independently deployed services?
Answer: Microservices.
, ●● What security challenge commonly increases with microservices?
Answer: The number of service-to-service connections and APIs
increases.
●● What security architecture has no normal network connection to
other systems?
Answer: Physical isolation / air gap.
●● What is the key difference between an air gap and logical
segmentation?
Answer: An air gap uses physical isolation.
●● What is the primary security benefit of logical segmentation?
Answer: It limits unnecessary communication and lateral movement
between systems.
●● What technology allows centralized control of network forwarding
behavior?
Answer: Software-defined networking (SDN).
●● What is an important security implication of SDN?
Answer: The controller can become a high-value target.
