최신GIAC Cloud Security Essentials - GCLD무료샘플문제

A. It ensures that security controls remain effective and can respond to evolving threats

B. It replaces the need for initial risk assessments and security control implementations

C. It is irrelevant as long as initial security measures are strong

D. It is only necessary for systems that handle sensitive information

A. Least privilege access

B. Regular network audits

C. Data encryption

D. Open network policies

A. Disabling traffic logs

B. Packet capture

C. Network flow analysis

D. Physical network access

A. By standardizing one vendor for all cloud services regardless of their security posture

B. By choosing the least expensive cloud service providers to reduce operational costs

C. By conducting thorough due diligence and continuous monitoring of the cloud service provider's practices

D. By assuming that all cloud vendors meet necessary compliance standards without verification

A. The cloud provider is solely responsible for all aspects of security.

B. Security responsibilities are divided between the cloud provider and the customer.

C. The customer is solely responsible for all aspects of security.

D. Security is outsourced to a third party.

A. Focus solely on performance improvements

B. Increase complexity

C. Reduce operational costs

D. Ensure standardized security practices

A. Provides public network access

B. Encrypts data in transit

C. Increases data storage

D. Disables encryption

A. GDPR

B. ISO 27001

C. HIPAA

D. PCI-DSS

A. Ensuring compliance with provider policies

B. Avoiding detection by the cloud provider

C. Conducting social engineering tests

D. Reducing cloud service costs

A. Disabling network monitoring

B. End-to-end encryption

C. Allowing unencrypted data transmission

D. VPN encryption

A. By limiting the types of containers that can be used

B. By enabling manual scaling of resources

C. By automating the deployment, scaling, and management of containers

D. By reducing the need for containers

A. Using hardware security modules (HSMs)

B. Implementing multi-factor authentication (MFA)

C. Storing secrets in plaintext

D. Disabling encryption