Computer Knowledge

Cloud Computing Management

2,340 Questions

Cloud computing management involves administering web based services, data storage, and network security protocols. This subject is heavily featured in the computer aptitude sections of banking and government recruitment tests. The practice questions address SaaS backup, cross region storage replication, and serverless application designs.

SaaS data backupPaaS use casesCloud storage replicationServerless applicationsCloud security tools

Cloud Computing Management Questions

Multiple choice

Which of the following is NOT a typical component of a Cloud Security SLA?

  1. A description of the security controls and measures implemented by the provider.

  2. A list of the security certifications and compliance standards that the provider must meet.

  3. A definition of the customer's responsibilities for securing their data and applications.

  4. A service-level objective (SLO) for uptime and availability.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A service-level objective (SLO) for uptime and availability is not a typical component of a Cloud Security SLA. While uptime and availability are important considerations for cloud services, they are typically covered in a separate service-level agreement (SLA) that focuses on the overall performance and reliability of the cloud service.

Multiple choice

What is the typical process for resolving a security incident under a Cloud Security SLA?

  1. The customer reports the incident to the provider.

  2. The provider investigates the incident and takes appropriate action to resolve it.

  3. The provider provides the customer with a report on the incident and the actions taken to resolve it.

  4. All of the above.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

The typical process for resolving a security incident under a Cloud Security SLA involves the customer reporting the incident to the provider, the provider investigating the incident and taking appropriate action to resolve it, and the provider providing the customer with a report on the incident and the actions taken to resolve it.

Multiple choice

Which of the following is NOT a common type of compensation that a customer may receive under a Cloud Security SLA in the event of a security incident?

  1. Financial compensation for damages incurred.

  2. Free or discounted cloud services.

  3. Extended support and maintenance services.

  4. All of the above.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Financial compensation for damages incurred, free or discounted cloud services, and extended support and maintenance services are all common types of compensation that a customer may receive under a Cloud Security SLA in the event of a security incident.

Multiple choice

Which of the following is NOT a best practice for negotiating a Cloud Security SLA?

  1. Clearly define the security responsibilities of both the provider and the customer.

  2. Include specific service-level objectives (SLOs) for security.

  3. Require regular security audits and penetration testing.

  4. Negotiate a long-term SLA with no option for early termination.
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Negotiating a long-term SLA with no option for early termination is not a best practice. It is important to have the flexibility to terminate the SLA if the provider is not meeting the agreed-upon security requirements or if the customer's security needs change.

Multiple choice

Which Google Cloud service provides centralized logging and monitoring for Google Cloud resources?

  1. Cloud Logging

  2. Cloud Monitoring

  3. Stackdriver

  4. Google Cloud Console
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Stackdriver is a unified logging and monitoring service that collects, stores, and analyzes logs and metrics from Google Cloud resources.

Multiple choice

What is the primary purpose of logging in cloud security?

  1. Identifying security incidents

  2. Complying with regulations

  3. Troubleshooting system issues

  4. Optimizing resource utilization
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Logging plays a crucial role in cloud security by providing a record of events and activities that can be analyzed to identify potential security incidents or suspicious behavior.

Multiple choice

Which of the following is NOT a type of log commonly collected in cloud security?

  1. System logs

  2. Application logs

  3. Network logs

  4. User logs
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

User logs typically contain information about user activities and interactions, which are not directly related to cloud security.

Multiple choice

What is the recommended approach for storing and retaining logs in cloud security?

  1. Store logs locally on individual servers

  2. Store logs in a centralized repository

  3. Delete logs after a short period

  4. Encrypt logs before storing
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Storing logs in a centralized repository allows for easier management, analysis, and correlation of events from different sources.

Multiple choice

Which Google Cloud service provides real-time monitoring and alerting capabilities?

  1. Cloud Monitoring

  2. Cloud Logging

  3. Stackdriver

  4. Google Cloud Console
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Cloud Monitoring offers real-time monitoring and alerting features, enabling you to set thresholds and receive notifications when specific conditions are met.

Multiple choice

What is the primary purpose of monitoring in cloud security?

  1. Identifying security incidents

  2. Complying with regulations

  3. Troubleshooting system issues

  4. Optimizing resource utilization
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Monitoring helps in detecting and diagnosing system issues, performance bottlenecks, and resource utilization problems, which can have security implications.

Multiple choice

Which of the following is NOT a common metric collected for monitoring cloud security?

  1. CPU utilization

  2. Memory usage

  3. Network traffic

  4. User login attempts
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

User login attempts are typically not monitored as a security metric, as they are more relevant to user activity monitoring.

Multiple choice

What is the recommended approach for setting up alerts in cloud security monitoring?

  1. Set alerts for all metrics and logs

  2. Set alerts only for critical events

  3. Set alerts based on historical data

  4. Set alerts based on predefined thresholds
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Setting alerts based on predefined thresholds allows you to focus on the most important events and reduce alert fatigue.

Multiple choice

Which Google Cloud service provides security-specific logging and monitoring capabilities?

  1. Cloud Security Center

  2. Cloud Logging

  3. Cloud Monitoring

  4. Stackdriver
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Cloud Security Center consolidates security logs and findings from various sources, providing a unified view of security posture and enabling proactive threat detection.

Multiple choice

What is the primary purpose of Cloud Security Center?

  1. Centralized logging and monitoring

  2. Vulnerability scanning

  3. Threat detection and response

  4. Compliance management
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Cloud Security Center focuses on threat detection and response, helping organizations identify and respond to security incidents in a timely manner.

Multiple choice

What is the recommended approach for configuring access controls for cloud logging and monitoring resources?

  1. Grant access to all users

  2. Grant access only to administrators

  3. Grant access based on roles and permissions

  4. Grant access based on resource tags
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Granting access based on roles and permissions allows for granular control over who can access logging and monitoring resources, ensuring that only authorized users have the necessary permissions.