What are two key steps in implementing threat-informed defense in the cloud?
(Choose Two)
Response:
A. Prioritizing high-impact threats
B. Disabling monitoring tools
C. Ignoring external threats
D. Identifying potential threats
正解:A,D
質問 2:
Which of the following are essential considerations when architecting cloud storage resources securely?
(Choose two)
Response:
A. Ensuring public access to all stored data
B. Regularly scheduled data deletion
C. Utilization of the least expensive storage options
D. Data encryption at rest and in transit
正解:B,D
質問 3:
How can organizations secure data stored in the cloud?
Response:
A. Reducing access logging
B. Implementing strong access controls and encryption
C. Disabling encryption for sensitive data
D. Allowing public access to sensitive data
正解:B
質問 4:
How can organizations enhance security for external access without compromising user convenience?
Response:
A. By using adaptive authentication methods that adjust required security measures based on context
B. By implementing strong, static passwords for all users
C. By allowing users to select their access levels
D. By avoiding the use of multi-factor authentication to speed up access
正解:A
質問 5:
When implementing Infrastructure as Code (IaC), which three principles should be followed to ensure effective cloud automation?
(Choose Three)
Response:
A. Source control management should be utilized.
B. Infrastructure should be provisioned manually before automating.
C. Code should be modular and reusable.
D. Documentation should be optional.
E. Changes should be tested in an isolated environment.
正解:A,C,E
質問 6:
What is the purpose of network segmentation in a cloud environment?
Response:
A. Increase bandwidth
B. Reduce the attack surface
C. Combine all network resources
D. Disable access controls
正解:B
質問 7:
For ensuring security in a Software as a Service (SaaS) environment, which of the following aspects is the customer NOT directly responsible for?
Response:
A. Application updates
B. Data security
C. Network controls
D. User access management
正解:A
質問 8:
What are two methods to prevent data loss in the cloud?
(Choose Two)
Response:
A. Implementing data classification policies
B. Regular data backups
C. Disabling data encryption
D. Storing all data in one location
正解:A,B
質問 9:
What are two critical factors to consider when managing secrets in the cloud?
(Choose Two)
Response:
A. Disabling authentication
B. Encryption of secrets
C. Using shared accounts
D. Periodic secret rotation
正解:B,D
1189 お客様のコメント





吉田** -
出題確率の高いテーマをコンパクトにまとめ、最小限の対策で合格をめざすGCLD参考書だぜ