D485 ITCL 5224
Cloud Security
Final Assessment (Qns & Ans)
2025
General Instructions
1. Read All Questions Carefully: Make sure you understand each question.
2. Time Management: You have a specific amount of time to complete the exam.
Keep an eye on the clock and pace yourself.
3. Allowed Materials: Only use materials that are explicitly allowed. Unauthorized
materials can lead to disqualification.
4. ANS Format: Follow the required format for your ANS. For example, multiple-
choice questions might need you to select the best ANS, while essay questions
require detailed responses.
5. Academic Integrity: Adhere to the university's honor code. Any form of cheating or
plagiarism is strictly prohibited.
6. Technical Requirements: Ensure your computer and internet connection are
stable. For online exams, you might need a webcam and microphone for proctoring
purposes.
7. Submission: Submit your ANS before the time expires. Late submissions might
not be accepted.
©2024/2025
,1. Which of the following forces the need for advanced
encryption in cloud environments?
A. Public Access
B. Multi-tenancy
C. Data Sovereignty
D. All of the above
ANS: D. All of the above
Rationale: Each of these factors presents unique security
challenges that require advanced encryption to protect sensitive
information.
2. What is the main objective of a cloud security posture
management (CSPM) solution?
A. Extend the cloud infrastructure
B. Manage on-premise security
C. Automate security compliance checks
D. Increase machine performance
ANS: C. Automate security compliance checks
Rationale: CSPM tools are designed to ensure cloud
configurations meet security and compliance standards
automatically.
3. Which of the following is a primary function of identity and
access management (IAM) in a cloud environment?
©2024/2025
, A. Network traffic monitoring
B. Implementing data encryption
C. Managing user identities and authentication
D. Conducting incident response
ANS: C. Managing user identities and authentication
Rationale: IAM systems are responsible for regulating who can
access cloud resources and under what conditions.
4. In cloud security, which threat model is primarily concerned
with the risk of insider threats?
A. Data Breach
B. Fundamental Security Model
C. Least Privilege
D. Shared Responsibility Model
ANS: C. Least Privilege
Rationale: The principle of least privilege aims to minimize
access rights for users to prevent insider threats effectively.
5. Which cloud deployment model provides the highest level of
control and customization?
A. Public Cloud
B. Private Cloud
C. Hybrid Cloud
D. Community Cloud
©2024/2025
Cloud Security
Final Assessment (Qns & Ans)
2025
General Instructions
1. Read All Questions Carefully: Make sure you understand each question.
2. Time Management: You have a specific amount of time to complete the exam.
Keep an eye on the clock and pace yourself.
3. Allowed Materials: Only use materials that are explicitly allowed. Unauthorized
materials can lead to disqualification.
4. ANS Format: Follow the required format for your ANS. For example, multiple-
choice questions might need you to select the best ANS, while essay questions
require detailed responses.
5. Academic Integrity: Adhere to the university's honor code. Any form of cheating or
plagiarism is strictly prohibited.
6. Technical Requirements: Ensure your computer and internet connection are
stable. For online exams, you might need a webcam and microphone for proctoring
purposes.
7. Submission: Submit your ANS before the time expires. Late submissions might
not be accepted.
©2024/2025
,1. Which of the following forces the need for advanced
encryption in cloud environments?
A. Public Access
B. Multi-tenancy
C. Data Sovereignty
D. All of the above
ANS: D. All of the above
Rationale: Each of these factors presents unique security
challenges that require advanced encryption to protect sensitive
information.
2. What is the main objective of a cloud security posture
management (CSPM) solution?
A. Extend the cloud infrastructure
B. Manage on-premise security
C. Automate security compliance checks
D. Increase machine performance
ANS: C. Automate security compliance checks
Rationale: CSPM tools are designed to ensure cloud
configurations meet security and compliance standards
automatically.
3. Which of the following is a primary function of identity and
access management (IAM) in a cloud environment?
©2024/2025
, A. Network traffic monitoring
B. Implementing data encryption
C. Managing user identities and authentication
D. Conducting incident response
ANS: C. Managing user identities and authentication
Rationale: IAM systems are responsible for regulating who can
access cloud resources and under what conditions.
4. In cloud security, which threat model is primarily concerned
with the risk of insider threats?
A. Data Breach
B. Fundamental Security Model
C. Least Privilege
D. Shared Responsibility Model
ANS: C. Least Privilege
Rationale: The principle of least privilege aims to minimize
access rights for users to prevent insider threats effectively.
5. Which cloud deployment model provides the highest level of
control and customization?
A. Public Cloud
B. Private Cloud
C. Hybrid Cloud
D. Community Cloud
©2024/2025
