MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is a compromised key in the context of cloud computing?
   a. A physical server hardware failure
   b. An encryption key that has been exposed to unauthorized parties
   c. A terminated cloud account
   d. A cloud storage outage
   Answer: bunit42.paloaltonetworks+1
2. Which is an immediate risk of a compromised key in cloud services?
   a. Reduced service performance
   b. Unauthorized access to encrypted data
   c. Limited scalability
   d. Enhanced encryption strength
   Answer: bsanfoundry+1
3. What cloud component is most at risk when a cryptographic key is compromised?
   a. User interface
   b. Storage
   c. API endpoints
   d. None of the above
   Answer: bspin
4. Which mechanism helps detect compromised keys in cloud infrastructure?
   a. Manual audits once a year
   b. Automated log monitoring and anomaly detection
   c. Monthly user surveys
   d. Hardware replacement
   Answer: bexabeam+1
5. What should be the first step upon discovering a compromised cryptographic key?
   a. Notify end users
   b. Rotate and revoke the key
   c. Continue monitoring traffic only
   d. Ignore unless a breach occurs
   Answer: bcloud.google
6. Why are compromised keys particularly dangerous in cloud computing?
   a. Because physical access is easy
   b. They enable attackers to decrypt and manipulate sensitive information
   c. Keys are rarely used
   d. Only temporary sessions are affected
   Answer: bunit42.paloaltonetworks+1
7. Which technology can help prevent the exploitation of compromised keys?
   a. Intrusion prevention systems
   b. Encryption key rotation and management
   c. Bandwidth throttling
   d. Cold storage
   Answer: bcloud.google+1
8. In cloud security, which process ensures keys are periodically changed?
   a. Key expiration
   b. Key escrow
   c. Key rotation
   d. Key signing
   Answer: ccloud.google
9. What is the role of Key Management Services (KMS) in dealing with compromised keys?
   a. Prevent key sharing between users
   b. Automate key creation, rotation, and deletion
   c. Restrict cloud network bandwidth
   d. Allocate cloud billing
   Answer: bspin+1
10. Which cloud security control can mitigate damage caused by compromised API keys?
    a. Limiting permissions and scopes of the keys
    b. Increasing storage limits
    c. Allowing universal network access
    d. Disabling monitoring
    Answer: aexabeam+1
11. What type of cloud breach can result from a compromised encryption key?
    a. Data leakage
    b. Physical server destruction
    c. Loss of network connectivity
    d. Increased backup times
    Answer: aunit42.paloaltonetworks+1
12. How can compromised keys be detected earlier?
    a. By relying on manual audits
    b. Through real-time security analytics and anomaly detection
    c. By increasing CPU performance
    d. By disabling encryption
    Answer: bexabeam+1
13. What is a common sign of a compromised key incident?
    a. Consistent service response times
    b. Unusual API usage or access patterns
    c. Timely software patching
    d. Insufficient storage
    Answer: bunit42.paloaltonetworks+1
14. Which cloud tool monitors and alerts on suspicious key usage?
    a. Cloud Security Posture Management (CSPM)
    b. Spreadsheet software
    c. Web browser extensions
    d. None
    Answer: aexabeam+1
15. Which best practice helps minimize impact from compromised keys?
    a. Using a single key for all services
    b. Segmentation and least privilege access
    c. Sharing keys freely among users
    d. Turning off logging
    Answer: bspin+2
16. What should be included in a cloud incident response playbook for key compromise?
    a. Contacting hardware vendors
    b. Procedures for key revocation and user notification
    c. Upgrading CDN services
    d. Expanding storage arrays
    Answer: bspin+1
17. How frequently should cloud keys be rotated to reduce compromise risk?
    a. Annually
    b. As frequently as is operationally feasible
    c. Only upon termination of an account
    d. Never
    Answer: bcloud.google+1
18. Why is key lifecycle management important in cloud security?
    a. It accelerates network bandwidth
    b. It ensures secure generation, distribution, rotation, and revocation
    c. It centralizes all user passwords
    d. It increases audit paperwork
    Answer: bspin+1
19. A compromised private key in cloud can allow an attacker to:
    a. Perform DDoS attacks more efficiently
    b. Access confidential data and impersonate legitimate users
    c. Increase the cloud storage size
    d. Patch operating systems remotely
    Answer: bunit42.paloaltonetworks+2
20. In the event of suspected key compromise, what action should follow key revocation?
    a. Updating documentation
    b. Investigating access logs for suspicious activity
    c. Announcing the compromise on social media
    d. Defragmenting cloud drives
    Answer: bcloud.google+1
21. What is an example of a compromised key attack vector in cloud?
    a. Weak password policy
    b. Source code repository accidentally exposing keys
    c. Overprovisioned virtual machines
    d. High CPU utilization
    Answer: bspin+1
22. What is the primary responsibility of a Cloud Access Security Broker (CASB) in the context of compromised keys?
    a. Enforce key expiration only
    b. Monitor, detect, and control the use of cloud keys
    c. Provide hardware firewalls
    d. Increase API latency
    Answer: bwhizlabs+1
23. If a compromised key is used to create new virtual machines, what is likely at risk?
    a. Cloud hardware
    b. Unauthorized compute resource consumption
    c. Permissive outbound rules
    d. None of the above
    Answer: bunit42.paloaltonetworks+1
24. What mitigates the risk of key compromise due to third-party app integrations?
    a. Disabling encryption globally
    b. Restricting key permissions and reviewing app requests
    c. Increasing storage capacity
    d. Allowing apps full access
    Answer: bexabeam+1
25. Why should privileged cloud keys be monitored closely?
    a. They usually have limited permissions
    b. They grant broad access across cloud resources
    c. They do not require passwords
    d. They are immune to phishing
    Answer: bunit42.paloaltonetworks+1
26. What is a potential consequence if a compromised key is not quickly identified?
    a. Increased data transfer rates
    b. Persistent unauthorized access and data loss
    c. Improved SLA commitments
    d. Faster VM provisioning
    Answer: bspin+1
27. How can automation support compromised key management in cloud?
    a. By automating traffic routing
    b. By triggering key rotation, revocation, and alerting
    c. By compressing logs
    d. By generating random reports
    Answer: bexabeam+1
28. Which part of the shared responsibility model relates to compromised keys?
    a. Physical facility safety
    b. Data encryption and key management performed by the customer
    c. Hardware shipping
    d. Data center maintenance
    Answer: bcloud.google+1
29. What is NOT an effective method for handling compromised keys?
    a. Key rotation and permission review
    b. Ignoring the incident
    c. User notification
    d. Log analysis
    Answer: bcloud.google+1
30. How does least privilege help prevent impact from a compromised key?
    a. By granting keys the highest level of access
    b. By reducing actions an attacker can perform
    c. By bypassing authentication
    d. By enforcing global admin rights
    Answer: bexabeam+1
31. What role does audit logging play in cloud key management?
    a. Tracks key usage for early compromise detection
    b. Deletes expired keys
    c. Increases local disk space
    d. Automatically escalates privileges
    Answer: aunit42.paloaltonetworks+1
32. Which AWS service assists in compromised key detection?
    a. AWS Inspector
    b. AWS GuardDuty
    c. AWS Storage Gateway
    d. AWS CloudHSM
    Answer: bcloud.google+1
33. What is an effective early warning for potential key compromise?
    a. Consistent access patterns
    b. Alerts for logins from unusual IP locations
    c. File system fragmentation
    d. Hardware driver updates
    Answer: bexabeam+1
34. Which step is recommended after revoking a compromised key?
    a. Reusing the same key
    b. Generating a new key and updating all relevant systems
    c. Increasing network latency
    d. Scaling down virtual machines
    Answer: bunit42.paloaltonetworks+1
35. The best defense against API key compromise is:
    a. Sharing keys among all users
    b. Regenerating keys periodically and limiting API permissions
    c. Increasing API endpoint count
    d. Encrypting hardware only
    Answer: bcloud.google+1
36. What policy reduces key exposure due to staff turnover?
    a. No change
    b. Immediate key rotation upon role changes
    c. Annual hardware inventory
    d. Open access for former employees
    Answer: bexabeam+1
37. Key compromise can lead to which type of cloud attack?
    a. Cross-site scripting only
    b. Privilege escalation and lateral movement
    c. Hardware degradation
    d. Data compression errors
    Answer: bexabeam+1
38. What cloud monitoring best practice applies for compromised key detection?
    a. Ignoring failed login attempts
    b. Correlating access logs with unusual resource consumption
    c. Deleting audit logs regularly
    d. Running less frequent audits
    Answer: bunit42.paloaltonetworks+1
39. In Google Cloud, what is the immediate action for compromised credentials?
    a. Deleting the project
    b. Disabling and revoking credentials
    c. Expanding IAM roles
    d. Rebooting VMs
    Answer: bcloud.google
40. What is recommended if a cryptographic key’s exposure is suspected but not confirmed?
    a. Wait for data breach reports
    b. Proactively rotate the key
    c. Expand user access
    d. Defer action indefinitely
    Answer: bunit42.paloaltonetworks+1
41. How does multi-factor authentication (MFA) assist against compromised keys?
    a. Makes keys less relevant
    b. Adds a layer of authentication, lowering impact
    c. Automatically rotates keys
    d. Creates new cloud regions
    Answer: bexabeam+1
42. Which factor can increase the likelihood of key compromise?
    a. Strong password policies
    b. Embedding secrets in public code repositories
    c. Key storage in secure vaults
    d. Using customer managed keys
    Answer: bspin+1
43. What does the principle of defense-in-depth mean for key management?
    a. Relying on a single security control
    b. Using multiple, layered controls to secure key usage
    c. Minimizing audit logging
    d. Publicly disclosing keys
    Answer: bcloud.google+1
44. Who is ultimately responsible for compromised key mitigation in cloud?
    a. The cloud service provider only
    b. The customer or tenant using the cloud
    c. The data center technician
    d. The internet provider
    Answer: bunit42.paloaltonetworks+1
45. Which of the following helps detect “shadow IT” key misuse?
    a. Network performance optimization
    b. CASB solutions
    c. Analytical query acceleration
    d. Offline storage
    Answer: bwhizlabs+1
46. When remediating a compromised key, why reset associated credentials?
    a. To improve server speed
    b. To prevent further unauthorized access
    c. To update cloud hardware
    d. To replicate the breach
    Answer: bcloud.google+1
47. What is an essential feature of an effective Key Management Service?
    a. Manual log review
    b. Centralized automated key creation, rotation, and auditing
    c. Exclusive hardware dependency
    d. Open key visibility
    Answer: bspin+1
48. Which outcome is likely if a compromised key is used by attackers for privilege escalation?
    a. Reduced billing
    b. Expanded access to other cloud resources
    c. Improved latency
    d. Cloud service patching
    Answer: bexabeam+1
49. The best policy for periodic review of cloud key permissions is:
    a. Annual review
    b. Frequent, automated permissions audits
    c. No review
    d. Only at year-end
    Answer: bspin+2
50. Which is NOT a mitigation for compromised keys in cloud?
    a. Immediate key revocation
    b. Rotating keys and investigating incident scope
    c. Publishing compromised keys online
    d. Monitoring for unauthorized actions
    Answer: cunit42.paloaltonetworks+1

1. https://unit42.paloaltonetworks.com/compromised-cloud-compute-credentials/
2. https://cloud.google.com/docs/security/compromised-credentials
3. https://www.sanfoundry.com/cloud-computing-questions-answers-cloud-security/
4. https://spin.ai/blog/data-breaches-in-cloud-computing/
5. https://www.exabeam.com/explainers/cloud-security/cloud-security-threats-top-threats-and-3-mitigation-strategies/
6. https://www.whizlabs.com/blog/ccsk-exam-sample-questions/
7. https://www.sanfoundry.com/1000-cloud-computing-questions-answers/
8. https://www.scribd.com/document/807732704/CCS335-CLOUD-COMPUTING-MCQ-Questions
9. https://testbook.com/objective-questions/mcq-on-cryptography–5eea6a0939140f30f369d918
10. https://www.interviewbit.com/cloud-computing-mcq/
11. https://testbook.com/objective-questions/mcq-on-data-network-security–64f9c10d513684ddf3ab2b0b
12. https://examradar.com/internet-of-things-iot-security-mcqs-multiple-choice-questions-with-answer/
13. https://www.placementpreparation.io/mcq/cloud-computing/
14. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
15. https://www.studocu.com/in/document/lovely-professional-university/cloud-computing/complete-cse423-mcq-mcq-preparation/78227004
16. https://www.scribd.com/document/541792862/Cloud-Computing-MCQ-Questions-and-Answers-PDF-Tutorial
17. https://testbook.com/objective-questions/mcq-on-network-security–5eea6a0939140f30f369d917
18. https://www.proofpoint.com/us/resources/webinars/stopping-cloud-account-compromises-key-insights-and-best-practices
19. https://www.sanfoundry.com/cyber-security-questions-answers-elements-security/
20. https://www.youtube.com/watch?v=fJd6mhmBi4s