D320 ITCL 3202 Managing Cloud
Security
Final Assessment Review
(Questions & Solutions)
2025
©2025
, Multiple Choice Questions (10 Questions)
1. Case Study – IaaS Security and Hypervisor Hardening
A multinational corporation deploys a large-scale Infrastructure as a
Service (IaaS) environment. During a security audit, the team discovers
that vulnerabilities at the hypervisor level might expose all virtual
machines to risk.
Question: Which of the following actions is most effective for
mitigating hypervisor-level threats?
A. Disabling all virtual machine activities
B. Applying vendor-provided hypervisor patches and enabling secure
boot
C. Increasing physical server RAM
D. Using an application firewall on each VM
ANS: B. Applying vendor-provided hypervisor patches and enabling
secure boot
Rationale: Hypervisor hardening through timely patching and secure
boot minimizes vulnerabilities at the virtualization layer, protecting all
hosted VMs without affecting their performance.
---
2. Case Study – Container Security in a PaaS Environment
A cloud-native application uses containers deployed via Docker in a
Platform as a Service (PaaS) environment. The security team wants to
ensure that containers are isolated and cannot access each other’s
resources.
Question: Which Linux kernel features are primarily responsible for
providing container isolation?
A. Virtualization and hypervisors
B. Namespaces and cgroups
C. RAID and LVM
D. IPTables and firewalld
©2025
, ANS: B. Namespaces and cgroups
Rationale: Linux namespaces isolate process resources (e.g., file
system, network, process IDs), while cgroups limit and monitor resource
usage—both essential for container isolation in a cloud setting.
---
3. Case Study – API Security for Cloud Services
A cloud service provider exposes its platform through public APIs. Recent
assessments have demonstrated attempted injection and unauthorized
access.
Question: Which combination of security measures is most appropriate
to secure these APIs?
A. SSL/TLS encryption and API keys with OAuth2
B. Disabling HTTPS to improve performance
C. Only using firewall IP filtering
D. Relying entirely on client-side security measures
ANS: A. SSL/TLS encryption and API keys with OAuth2
Rationale: Encrypting API communication using SSL/TLS combined with
robust authentication and authorization (via API keys/OAuth2) ensures
data confidentiality and proper access control.
---
4. Case Study – Data Encryption in Cloud Storage
A financial institution stores highly sensitive data in a cloud object
storage system. To ensure that data is secure both in transit and at rest,
the security team must choose an encryption model.
Question: Which encryption approach best offers end-to-end security
for data in this cloud environment?
A. Encrypting data only when it is transmitted
B. Encrypting data at rest only
C. Client-side encryption before uploading data
D. Relying solely on provider-managed encryption keys
ANS: C. Client-side encryption before uploading data
©2025
Security
Final Assessment Review
(Questions & Solutions)
2025
©2025
, Multiple Choice Questions (10 Questions)
1. Case Study – IaaS Security and Hypervisor Hardening
A multinational corporation deploys a large-scale Infrastructure as a
Service (IaaS) environment. During a security audit, the team discovers
that vulnerabilities at the hypervisor level might expose all virtual
machines to risk.
Question: Which of the following actions is most effective for
mitigating hypervisor-level threats?
A. Disabling all virtual machine activities
B. Applying vendor-provided hypervisor patches and enabling secure
boot
C. Increasing physical server RAM
D. Using an application firewall on each VM
ANS: B. Applying vendor-provided hypervisor patches and enabling
secure boot
Rationale: Hypervisor hardening through timely patching and secure
boot minimizes vulnerabilities at the virtualization layer, protecting all
hosted VMs without affecting their performance.
---
2. Case Study – Container Security in a PaaS Environment
A cloud-native application uses containers deployed via Docker in a
Platform as a Service (PaaS) environment. The security team wants to
ensure that containers are isolated and cannot access each other’s
resources.
Question: Which Linux kernel features are primarily responsible for
providing container isolation?
A. Virtualization and hypervisors
B. Namespaces and cgroups
C. RAID and LVM
D. IPTables and firewalld
©2025
, ANS: B. Namespaces and cgroups
Rationale: Linux namespaces isolate process resources (e.g., file
system, network, process IDs), while cgroups limit and monitor resource
usage—both essential for container isolation in a cloud setting.
---
3. Case Study – API Security for Cloud Services
A cloud service provider exposes its platform through public APIs. Recent
assessments have demonstrated attempted injection and unauthorized
access.
Question: Which combination of security measures is most appropriate
to secure these APIs?
A. SSL/TLS encryption and API keys with OAuth2
B. Disabling HTTPS to improve performance
C. Only using firewall IP filtering
D. Relying entirely on client-side security measures
ANS: A. SSL/TLS encryption and API keys with OAuth2
Rationale: Encrypting API communication using SSL/TLS combined with
robust authentication and authorization (via API keys/OAuth2) ensures
data confidentiality and proper access control.
---
4. Case Study – Data Encryption in Cloud Storage
A financial institution stores highly sensitive data in a cloud object
storage system. To ensure that data is secure both in transit and at rest,
the security team must choose an encryption model.
Question: Which encryption approach best offers end-to-end security
for data in this cloud environment?
A. Encrypting data only when it is transmitted
B. Encrypting data at rest only
C. Client-side encryption before uploading data
D. Relying solely on provider-managed encryption keys
ANS: C. Client-side encryption before uploading data
©2025
