Cloud Security & Infrastructure Protection Flashcards
7 cards from real CSS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Cloud Security & Infrastructure Protection flashcards as text
What does the 'shared responsibility model' in cloud security primarily define?
Answer: The division of security responsibilities between the cloud provider and the customer
The shared responsibility model delineates which security tasks are managed by the cloud provider versus those that remain the customer's obligation.
Which cloud deployment model provides an organization with the highest level of control over its infrastructure?
Answer: Private cloud
A private cloud is dedicated exclusively to one organization, granting the greatest control over security configurations and infrastructure.
What is a Cloud Access Security Broker (CASB)?
Answer: A security policy enforcement point between cloud users and cloud services
A CASB acts as an intermediary security layer that enforces visibility and policy controls between users and cloud applications.
Which security concern is MOST unique to multi-tenant cloud environments?
Answer: Data isolation and tenant separation failures
Multi-tenancy creates the risk of data leaking between co-located tenants, making proper logical isolation the defining security concern.
What is the primary purpose of Cloud Security Posture Management (CSPM)?
Answer: To continuously assess cloud configurations for compliance gaps and security risks
CSPM tools automatically and continuously evaluate cloud infrastructure configurations to surface misconfigurations, compliance violations, and security risks.
In cloud computing, what does 'data sovereignty' refer to?
Answer: The legal principle that data is subject to the laws of the country where it resides
Data sovereignty means data is governed by the laws and regulations of the nation in which it is physically stored, affecting cross-border transfer decisions.
Which cloud service model gives customers the LEAST control over the underlying infrastructure?
Answer: Software as a Service (SaaS)
In SaaS, the provider manages all infrastructure, middleware, runtime, and application code, leaving customers with control only over their own data and user access settings.