Question 1 of 10 · Cloud Concepts, Architecture and Design
What does interoperability mean in cloud computing?
Interoperability is the ability of systems to work together and exchange information. Moving data is portability, returning workloads is reversibility, and network-free operation is unrelated.
Question 2 of 10 · Cloud Data Security
Why are storage snapshots a security concern?
Snapshots capture complete volumes; if shared publicly or copied to other accounts, they expose all the data. They do not block encryption, delete volumes or require another provider.
Question 3 of 10 · Cloud Platform and Infrastructure Security
What is role-based access in a cloud platform?
Roles bundle permissions for functions, simplifying least-privilege management and review. Equal, self-granted or random permissions are not RBAC.
Question 4 of 10 · Cloud Application Security
What characterizes the PASTA threat modeling method?
PASTA, the Process for Attack Simulation and Threat Analysis, runs seven stages from business objectives to attack modeling and risk analysis. STRIDE is the six-type list, DREAD the five-factor score.
Question 5 of 10 · Cloud Security Operations
Which framework focuses on governance and management of enterprise IT?
COBIT, from ISACA, is a framework for IT governance and management objectives. OWASP covers application security, and STRIDE and PASTA are threat modeling methods.
Question 6 of 10 · Legal, Risk and Compliance
What is the difference between a SOC 1 and a SOC 2 report?
SOC 1 addresses controls relevant to user entities' financial reporting, while SOC 2 covers security, availability, processing integrity, confidentiality and privacy. Size and publication are not the difference.
Question 7 of 10 · Cloud Concepts, Architecture and Design
What is ephemeral computing?
Ephemeral resources exist only for a task, which limits persistence but complicates logging and forensics. The distractors describe long-lived or isolated systems.
Question 8 of 10 · Cloud Data Security
Which is an example of semi-structured data?
Semi-structured data has tags or keys but no fixed schema, such as JSON or XML. Relational tables are structured, and scans and recordings are unstructured.
Question 9 of 10 · Cloud Platform and Infrastructure Security
When might a company plan DR across two cloud providers?
Multi-provider DR protects against provider-wide failure or exit, at the cost of complexity. It increases contracts, still needs testing and may spread jurisdictions.
Question 10 of 10 · Cloud Application Security
When should threat models be updated?
Threat models should evolve with the architecture so new flows and components are analyzed. One-time or reactive updates miss changes.
0 of 10
Cloud Concepts, Architecture and Design
Cloud Data Security
Cloud Platform and Infrastructure Security
Cloud Application Security
Cloud Security Operations
Legal, Risk and Compliance
Which domains cost you the points? Members see a breakdown by domain and a study plan built from it.