Preview a few questions below — answers are revealed when you take the
exam.
-
A cloud security team needs to implement a multi-factor authentication (MFA) system for their organization. They have several options available, including SMS-based MFA, email-based MFA, and authenticator app-based MFA. Considering the organization's need for high security and user convenience, which MFA method should they choose and why?
- SMS-based MFA, as it is widely adopted and easy to implement.
- Email-based MFA, as it provides an additional layer of security compared to SMS.
- Authenticator app-based MFA, as it offers better security and user experience compared to SMS and email.
- A combination of SMS and email-based MFA, to provide multiple authentication options for users.
-
A cloud service provider has experienced a data breach, and sensitive customer information has been exposed. As a cloud security professional, what steps should be taken to mitigate the impact of the breach and prevent future incidents?
- Immediately notify affected customers and law enforcement, conduct a thorough investigation, and implement additional security measures to prevent future breaches.
- Downplay the incident to avoid negative publicity, and quietly work on fixing the vulnerability without informing customers.
- Focus on restoring normal operations as quickly as possible, and address security concerns after the incident has been resolved.
- Blame the breach on external factors, such as a third-party vendor, to shift responsibility away from the organization.
-
A cloud-based application is experiencing performance issues, and the development team suspects that the problem is related to the underlying infrastructure. Which approach should the team take to identify and resolve the issue?
- Conduct a thorough review of the application's code and configuration, and work with the cloud service provider to optimize the infrastructure.
- Blame the cloud service provider for the performance issues and demand a refund or compensation.
- Migrate the application to a different cloud service provider, assuming that the new provider will offer better performance.
- Ignore the performance issues, assuming that they will resolve themselves over time.
-
Identify the command used to list all the security groups associated with an Amazon Web Services (AWS) account.
- aws ec2 describe-security-groups
- aws ec2 list-security-groups
- aws ec2 get-security-groups
- aws ec2 show-security-groups
-
Select the service that provides a fully managed, petabyte-scale data warehouse service in the cloud, enabling fast and cost-effective analysis of all your data using your existing business intelligence tools.
- Amazon Redshift
- Google BigQuery
- Microsoft Azure Synapse Analytics
- All of the above