Cloud Security

Question 1

Inherited Controls

Answer 1

Fully managed by the cloud provider

Question 2

Shared Controls

Answer 2

Responsibilities shared between the cloud provider and the client

Question 3

Shared Responsibility Model

Answer 3

Defines which security tasks are handled by the cloud provider and which are handled by the client

Question 4

Customer-to-cloud Connectivity

Answer 4

Refers to the secure connection established between a customer’s network and the cloud provider

Question 5

Cloud Service Integration

Answer 5

Involves securely linking different cloud services and platforms to work together

Question 6

Shadow IT Detection

Answer 6

Process of identifying and managing unauthorized cloud services or applications that employees may install and use without the IT team’s knowledge

Question 7

Unsecured Storage Resources

Answer 7

Refer to cloud storage that lacks proper security configurations

Question 8

Data Leakage

Answer 8

Refers to the unauthorized transmission of data from within the cloud environment to external parties

Question 9

Data Remanence

Answer 9

Residual data that remains on storage devices after deletion

Question 10

AWS Storage Resource

Answer 10

Buckets

Question 11

Azure Storage Resource

Answer 11

Blobs

Question 12

Cross-Origin Resource Sharing (CORS)

Answer 12

Used when data is shared across different domains to control how resources are shared between these domains

Question 13

API Security

Answer 13

Protects APIs from unauthorized access, misuse, and attacks to ensure secure interactions between applications and cloud services
Components include authorization, rate limiting, and logging

Question 14

In API security, authorization is typically implemented through ___

Answer 14

Token-based systems

Question 15

CASB

Answer 15

Cloud Access Security Broker
A security solution that acts as a control point between cloud service users and cloud applications

Question 16

API-based CASB

Answer 16

Integrates directly with cloud services and uses APIs to monitor and control data flow, enforce security policies, and provide visibility into cloud usage without affecting user experience

Question 17

Proxy-based CASB

Answer 17

Routes cloud traffic through a proxy server, allowing real-time inspection, threat prevention, and enforcement of security policies by sitting between the user and the cloud service

Question 18

Forward Proxy CASB

Answer 18

CASB is positioned at the edge of the user’s network, ensuring user compliance with security policies before they reach the cloud. Intercepts all user traffic.

Question 19

Reverse Proxy CASB

Answer 19

CASB is positioned between the user and the cloud service. Only intercepts and inspects traffic headed to cloud services.

Question 20

Terraform

Answer 20

An Infrastructure as Code (IaC) tool, automating the provisioning of cloud infrastructure

Question 21

Ansible

Answer 21

Automation tool that focuses on configuration management, application deployment, and task automation
Operates using playbooks, which are simple YAML files that describe the tasks to be executed

Question 22

OWASP Dependency-Check

Answer 22

Widely used tool that scans dependencies for known vulnerabilities across various programming languages

Question 23

npm audit

Answer 23

Focuses on scanning dependencies in JavaScript and Node.js projects

Question 24

CI/CD Pipeline

Answer 24

Continuous Integration/Continuous Development
Automated process of integrating, testing, and deploying code changes in a secure and efficient manner

Question 25

Continuous Integration

Answer 25

Involves regularly merging code changes into a shared repository, where automated tests and security scans are run

Question 26

Continuous Deployment

Answer 26

Automatically deploys tested code to production environments

Question 27

Phases of CI/CD Pipeline

Answer 27

Source code integration Automated Testing Build and Deployment Monitoring and Feedback

Question 28

Serverless Computing

Answer 28

Running application code without managing the underlying infrastructure

Question 29

Serverless Computing - Workloads

Answer 29

Refer to specific tasks or operations that the serverless functions execute

Question 30

Serverless Computing - Functions

Answer 30

The individual units of work in a serverless architecture, where each function performs a specific task

Question 31

Microservices Architecture

Answer 31

In this setup, each function is designed to perform a single task, and multiple functions interact to create a complete application