COMPREHENSIVE CLOUD SECURITY
AND ARCHITECTURE FLASHCARDS
FOR IT PROFESSIONALS EXAM
2026/2027 WITH 185 QUESTIONS AND
EXPERT-VERIFIED CORRECT
ANSWERS | ALREADY GRADED A+ |
GUARANTEED PASS | CLOUD
SECURITY AND ARCHITECTURE EXAM
What is Broad network access? - ANSWER-Services are available over networks
through standard mechanisms.
What is Shared responsibility? - ANSWER-Provider secures the cloud; customer
secures data, identities, configurations, and workloads within the cloud.
What is Provider responsibility? - ANSWER-Physical facilities, hardware,
foundational networking, virtualization, and provider-managed service
infrastructure.
,What is Customer responsibility? - ANSWER-Data, IAM, permissions, application
settings, guest OS in IaaS, network rules, retention, and monitoring configuration.
What is CSPM? - ANSWER-Cloud Security Posture Management detects cloud
misconfiguration, risky permissions, public exposure, and policy violations.
What is Secure baseline? - ANSWER-Approved standard configuration used
before deployment.
What is Configuration drift? - ANSWER-A system no longer matches its approved
secure baseline.
What is Defense in depth? - ANSWER-Multiple complementary control layers
reduce reliance on any single safeguard.
What is Landing zone? - ANSWER-Preconfigured cloud environment with
baseline identity, networking, logging, security, and governance.
What is Infrastructure as code? - ANSWER-Provisioning infrastructure through
versioned templates or code.
What is Least functionality? - ANSWER-Enable only required ports, services,
software, and features.
What is Attack surface? - ANSWER-All reachable points that could be exploited,
including identities, APIs, ports, services, and configurations.
What is Security group? - ANSWER-Resource-level virtual firewall-like control,
commonly stateful.
, What is Network ACL? - ANSWER-Subnet or network boundary rules, commonly
stateless.
What is Authentication? - ANSWER-Verifies identity: who are you?
What is Authorization? - ANSWER-Determines permitted actions: what may you
do?
What is Accounting? - ANSWER-Records activity for audit and accountability.
What is MFA? - ANSWER-Uses factors from different categories, such as
password plus authenticator or biometric.
What is RBAC? - ANSWER-Access based on job role.
What is ABAC? - ANSWER-Access based on user, resource, action, and
environmental attributes.
What is Least privilege? - ANSWER-Grant only the minimum access needed for
the minimum time.
What is IaaS? - ANSWER-Infrastructure as a Service: provider supplies compute,
storage, networking, and virtualization; customer manages guest OS, applications,
data, identities, and many configurations.
What is PaaS? - ANSWER-Platform as a Service: provider manages infrastructure,
OS, and runtime; customer focuses on application code, data, and access.
AND ARCHITECTURE FLASHCARDS
FOR IT PROFESSIONALS EXAM
2026/2027 WITH 185 QUESTIONS AND
EXPERT-VERIFIED CORRECT
ANSWERS | ALREADY GRADED A+ |
GUARANTEED PASS | CLOUD
SECURITY AND ARCHITECTURE EXAM
What is Broad network access? - ANSWER-Services are available over networks
through standard mechanisms.
What is Shared responsibility? - ANSWER-Provider secures the cloud; customer
secures data, identities, configurations, and workloads within the cloud.
What is Provider responsibility? - ANSWER-Physical facilities, hardware,
foundational networking, virtualization, and provider-managed service
infrastructure.
,What is Customer responsibility? - ANSWER-Data, IAM, permissions, application
settings, guest OS in IaaS, network rules, retention, and monitoring configuration.
What is CSPM? - ANSWER-Cloud Security Posture Management detects cloud
misconfiguration, risky permissions, public exposure, and policy violations.
What is Secure baseline? - ANSWER-Approved standard configuration used
before deployment.
What is Configuration drift? - ANSWER-A system no longer matches its approved
secure baseline.
What is Defense in depth? - ANSWER-Multiple complementary control layers
reduce reliance on any single safeguard.
What is Landing zone? - ANSWER-Preconfigured cloud environment with
baseline identity, networking, logging, security, and governance.
What is Infrastructure as code? - ANSWER-Provisioning infrastructure through
versioned templates or code.
What is Least functionality? - ANSWER-Enable only required ports, services,
software, and features.
What is Attack surface? - ANSWER-All reachable points that could be exploited,
including identities, APIs, ports, services, and configurations.
What is Security group? - ANSWER-Resource-level virtual firewall-like control,
commonly stateful.
, What is Network ACL? - ANSWER-Subnet or network boundary rules, commonly
stateless.
What is Authentication? - ANSWER-Verifies identity: who are you?
What is Authorization? - ANSWER-Determines permitted actions: what may you
do?
What is Accounting? - ANSWER-Records activity for audit and accountability.
What is MFA? - ANSWER-Uses factors from different categories, such as
password plus authenticator or biometric.
What is RBAC? - ANSWER-Access based on job role.
What is ABAC? - ANSWER-Access based on user, resource, action, and
environmental attributes.
What is Least privilege? - ANSWER-Grant only the minimum access needed for
the minimum time.
What is IaaS? - ANSWER-Infrastructure as a Service: provider supplies compute,
storage, networking, and virtualization; customer manages guest OS, applications,
data, identities, and many configurations.
What is PaaS? - ANSWER-Platform as a Service: provider manages infrastructure,
OS, and runtime; customer focuses on application code, data, and access.
