Unit 6: Emerging Trends and Best Practices in Cloud Security - Practice Quiz

1 Which security model assumes that no user or device should be trusted automatically?

2 Which recent cloud security trend focuses on protecting applications throughout their development lifecycle?

3 What does a cloud-native security approach primarily protect?

4 How can artificial intelligence help improve cloud security?

5 What type of data can an AI security system analyze to identify possible cloud attacks?

6 Which task can AI automate in a cloud security system?

7 Where does edge computing process data?

8 What is a major benefit of edge computing?

9 Why must edge devices be secured?

10 Quantum cryptography is based primarily on principles from which field?

11 What is the main purpose of quantum key distribution?

12 What may happen when an attacker observes information in a quantum communication channel?

13 Which practice helps secure a newly deployed cloud service?

14 Which access principle should be used during secure cloud deployment?

15 What protects sensitive cloud data from being easily read if it is intercepted?

16 What is the main purpose of a regular cloud security audit?

17 How often should cloud security audits generally be performed?

18 What is the primary goal of a vulnerability assessment?

19 What commonly happens after vulnerabilities are discovered?

20 What does a proactive cloud security posture emphasize?

21 A company uses multiple cloud providers and wants one system to enforce consistent identity, logging, and policy controls across all environments. Which trend best addresses this requirement?

22 A development team frequently deploys containers and serverless functions. Which security practice is most aligned with current cloud security trends?

23 An organization wants to verify that users and devices are trusted for every cloud access request, even when they are inside the corporate network. Which approach should it adopt?

24 An AI security system detects that an employee's account suddenly accesses data from two distant countries within a few minutes. What capability is the system applying?

25 A cloud security model is trained using historical incidents, but its alerts increase significantly after a major change in user behavior. What is the most appropriate response?

26 An AI tool recommends isolating a production workload after detecting suspicious activity. What should a security analyst do before allowing automatic isolation?

27 A healthcare provider processes patient-monitoring data at edge locations to reduce latency. Which security control is especially important for these distributed sites?

28 An edge device continues collecting sensitive data when its connection to the central cloud is interrupted. Which design choice best reduces security risk?

29 A company deploys thousands of edge sensors from different manufacturers. Which approach best supports consistent security management?

30 A financial institution is concerned that encrypted data captured today could be decrypted by future quantum computers. Which strategy best addresses this risk?

31 In quantum key distribution, an unauthorized party measures photons while attempting to intercept a key. What security property helps reveal the interception?

32 A cloud provider is planning a long-term migration to post-quantum security. Which preparation is most practical before replacing all current cryptographic systems?

33 A team is deploying a cloud application that stores customer records. Which configuration most directly reduces unauthorized access?

34 A deployment pipeline creates cloud resources from approved templates. A security engineer wants to prevent insecure configurations before deployment. Which control is most suitable?

35 During a cloud audit, an organization discovers that several inactive accounts still have administrative permissions. What should be done first?

36 A company wants its cloud audit findings to be useful for improving security over time. Which practice is most effective?

37 A vulnerability scanner reports a critical issue in a public-facing virtual machine. What factor should primarily influence remediation priority?

38 A scan identifies a vulnerability in a cloud service, but the service is protected by strict network controls and is not internet-facing. How should the result be handled?

39 A security team continuously monitors cloud configurations and automatically compares them with approved baselines. What security objective does this primarily support?

40 A company conducts tabletop exercises for a possible cloud ransomware incident. Which benefit most directly supports a proactive security posture?

41 An enterprise operates Kubernetes clusters, serverless functions, and virtual machines across three cloud providers. Security teams receive thousands of isolated findings without knowing which findings form exploitable attack paths. Which modernization most directly addresses this problem?

42 A multi-cloud organization is replacing network-location trust with identity-centric controls. Which design most closely implements a cloud-native Zero Trust model?

43 A behavioral model retrained from recent cloud telemetry gradually stops flagging a malicious API sequence because an attacker repeatedly injects similar low-volume events into the training stream. What is the most appropriate primary defense?

44 An AI detector is evaluated under the cost function , where is the number of false negatives and is the number of false positives. Which operating point minimizes cost?

45 A cloud anomaly model has stable test accuracy but produces increasing false positives after a major migration from virtual machines to serverless workloads. Which response best addresses the likely cause without weakening detection globally?

46 Edge gateways must authorize safety-critical commands during intermittent disconnection from the central cloud. Which architecture best balances availability with bounded security risk?

47 A cloud service must release decryption keys only to edge nodes running approved firmware and an untampered boot chain. Which mechanism most directly provides this assurance?

48 Thousands of edge sensors contribute measurements to a cloud analytics service, but individual readings must remain hidden from both the network and the aggregator. The cloud needs only the sum of all readings. Which approach is most suitable?

49 Two data centers use quantum key distribution to generate symmetric keys. Why is an authenticated classical channel still required?

50 An organization fears that adversaries are collecting encrypted traffic now for future quantum decryption. Which migration strategy provides the strongest practical transition for key establishment?

51 A production resource is manually modified after deployment, creating a difference from its reviewed Infrastructure as Code template. Which control most effectively prevents the modification from becoming a persistent hidden state?

52 A Kubernetes deployment pipeline must prevent containers from reaching production if they are unsigned, request privileged execution, or contain critical exploitable packages. Where should enforcement primarily occur?

53 A microservice currently stores a long-lived cloud API key in an encrypted environment variable. Which redesign best reduces secret theft and rotation risk?

54 An auditor finds that storage encryption was enabled on the audit date, but the organization cannot prove it remained enabled throughout the year. Which evidence would best address the deficiency?

55 A SaaS provider claims that all security controls are covered by the cloud infrastructure provider's compliance report. What should an auditor examine first?

56 Four vulnerable assets require prioritization. Which should be remediated first when using an exposure-aware risk model rather than CVSS alone?

57 Container workloads often terminate before a scheduled scanner can inspect them. Which assessment design best minimizes this visibility gap?

58 An authenticated scanner reports that a managed database is fully patched, but the service remains publicly reachable with weak authentication settings. What conclusion is most accurate?

59 A security graph shows that a low-privilege developer can modify a build script, the build runner can assume a deployment role, and that role can alter production identity policies. Which remediation most directly breaks the attack path with minimal operational impact?

60 A cloud security team wants to test whether leaked workload credentials can be detected and contained before an attacker reaches sensitive storage. Which exercise best evaluates the complete defensive capability?