MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is a secret in cloud computing?
   a. Any sensitive data such as passwords, API keys, or database credentials used by applications.
   b. Non-encrypted logs generated by cloud instances.
   c. Usernames stored in public repositories.
   d. Service level agreements in cloud contracts.
   Answer: a. Any sensitive data such as passwords, API keys, or database credentials used by applications.interviewquizz+1
2. What tool is commonly used to store secrets securely in AWS?
   a. AWS Secrets Manager
   b. AWS S3
   c. AWS DynamoDB
   d. AWS EC2
   Answer: a. AWS Secrets Manager.aws.amazon
3. Which protocol is recommended to secure secrets in transit?
   a. TLS/SSL
   b. FTP
   c. HTTP
   d. Telnet
   Answer: a. TLS/SSL.cloud.google+1
4. What should never be done with secrets in source code?
   a. Store secrets in version control systems
   b. Encrypt secrets in files
   c. Reference environment variables
   d. Delete secrets after use
   Answer: a. Store secrets in version control systems.interviewquizz+1
5. What is secret rotation?
   a. Replacing secrets regularly to reduce risk of exposure
   b. Changing cloud provider
   c. Rotating disk storage
   d. Restarting virtual machines
   Answer: a. Replacing secrets regularly to reduce risk of exposure.aws.amazon
6. Which of the following is NOT a benefit of secrets management platforms?
   a. Increases credential visibility
   b. Adds operational overhead
   c. Limits unauthorized access
   d. Supports audit logging
   Answer: b. Adds operational overhead.aembit
7. What is dynamic secret?
   a. Secret generated on-demand and expires automatically
   b. A hardcoded credential
   c. A public API endpoint
   d. A static password never changed
   Answer: a. Secret generated on-demand and expires automatically.interviewquizz
8. What is the principle of least privilege?
   a. Granting only minimum access needed to users/services
   b. Sharing secrets with all users
   c. Giving admin privileges to most users
   d. Allowing open access to secrets
   Answer: a. Granting only minimum access needed to users/services.cloud.ibm+1
9. Where should secrets be stored for Google Cloud Run?
   a. Secret Manager
   b. Local file system
   c. Unencrypted environment variables
   d. Public buckets
   Answer: a. Secret Manager.cloud.google
10. In Azure, which service manages secrets?
    a. Azure Key Vault
    b. Azure Blob Storage
    c. Azure SQL Database
    d. Azure App Service
    Answer: a. Azure Key Vault.interviewquizz
11. How are secrets injected into containerized applications?
    a. Through environment variables or mounted volumes
    b. Hardcoded in the image
    c. Included in deployment logs
    d. Exposed via API endpoints
    Answer: a. Through environment variables or mounted volumes.cloud.google+1
12. What is token-based authentication in secrets management?
    a. Using temporary credentials to access secrets stores
    b. Using static passwords for authentication
    c. Relying on user prompts
    d. Authenticating through open ports
    Answer: a. Using temporary credentials to access secrets stores.interviewquizz
13. Why should access to secrets be revoked promptly?
    a. To minimize risk of credential compromise
    b. To allow more users simultaneously
    c. To speed up application boot time
    d. To free up storage space
    Answer: a. To minimize risk of credential compromise.cloud.ibm
14. What does audit logging for secrets access provide?
    a. Forensic tracking and compliance monitoring
    b. Extra storage space
    c. Faster application boot-up
    d. Lower encryption costs
    Answer: a. Forensic tracking and compliance monitoring.cloud.ibm+1
15. What happens if secret retrieval fails with an environment variable in Cloud Run?
    a. The instance doesn’t start
    b. The instance restarts automatically
    c. The secret is replaced with a default value
    d. The secret is printed to logs
    Answer: a. The instance doesn’t start.cloud.google
16. What is secret versioning?
    a. Maintaining multiple versions for rollback and audit
    b. Deleting secrets after one use
    c. Changing user roles
    d. Generating public keys
    Answer: a. Maintaining multiple versions for rollback and audit.interviewquizz
17. What is a vault token?
    a. A temporary token granting limited access to Vault secrets
    b. A static root credential
    c. An encrypted configuration file
    d. A public access key
    Answer: a. A temporary token granting limited access to Vault secrets.interviewquizz
18. Name one risk of poor secrets management.
    a. Data leaks and security breaches
    b. Lower storage costs
    c. Increased availability
    d. Faster network speed
    Answer: a. Data leaks and security breaches.interviewquizz
19. What is “secret zero”?
    a. Initial credential used to bootstrap secrets management
    b. A randomly generated configuration key
    c. A public API endpoint
    d. A special instance type
    Answer: a. Initial credential used to bootstrap secrets management.interviewquizz
20. What encryption standard is commonly used for secrets at rest?
    a. AES-256
    b. DES
    c. MD5
    d. SHA-1
    Answer: a. AES-256.aws.amazon+1
21. How do secrets managers help improve compliance?
    a. By enforcing access controls and audit logging
    b. By sharing secrets widely
    c. By disabling encryption
    d. By eliminating all credential requirements
    Answer: a. By enforcing access controls and audit logging.cloud.ibm+1
22. What is a common method for secret injection?
    a. Environment variables in deployment templates
    b. Including secrets in documentation
    c. Posting secrets on forums
    d. Storing secrets in log files
    Answer: a. Environment variables in deployment templates.cloud.google+1
23. How do secret management services handle disaster recovery?
    a. Replicate encrypted secrets across regions and backup secret metadata
    b. Delete all secrets after use
    c. Disable audit logging
    d. Ignore policy enforcement
    Answer: a. Replicate encrypted secrets across regions and backup secret metadata.interviewquizz
24. What is the role of IAM in secrets management?
    a. Controls identities and enforces secret access permissions
    b. Schedules server reboots
    c. Encrypts regular data files
    d. Monitors network activity
    Answer: a. Controls identities and enforces secret access permissions.cloud.ibm+1
25. What is a secret lease?
    a. Time-bound authorization for accessing a secret
    b. Perpetual access to secrets
    c. Non-expiring cloud resources
    d. Unlimited root credentials
    Answer: a. Time-bound authorization for accessing a secret.interviewquizz
26. How should long-lived secrets be managed when necessary?
    a. Store in tightly controlled environment-level vaults
    b. Expose in environment variables
    c. Log to monitoring services
    d. Enter manually for each application
    Answer: a. Store in tightly controlled environment-level vaults.aembit
27. Which cloud platform offers Secret Manager for secure secret storage?
    a. Google Cloud Platform
    b. Microsoft OneDrive
    c. Amazon EC2
    d. DigitalOcean Spaces
    Answer: a. Google Cloud Platform.cloud.google
28. What is a challenge when synchronizing secrets across multi-cloud environments?
    a. Inconsistent policies and operational overhead
    b. Lower bandwidth
    c. Higher compute cost
    d. Simpler resource management
    Answer: a. Inconsistent policies and operational overhead.aembit
29. Which of the following types of sensitive data can be managed as secrets?
    a. Passwords, API keys, tokens, certificates, database credentials
    b. Log files and reports
    c. Images and videos
    d. User names in public databases
    Answer: a. Passwords, API keys, tokens, certificates, database credentials.interviewquizz
30. What is secret revocation?
    a. Invalidation or deletion of secrets/tokens to block access
    b. Distribution of secrets to all users
    c. Encryption of source files
    d. Managing resource tags
    Answer: a. Invalidation or deletion of secrets/tokens to block access.interviewquizz
31. Why use centralized secrets management tools?
    a. To securely store, manage, and control access to sensitive cloud data
    b. To accelerate compute costs
    c. To expose credentials for debugging
    d. To avoid encryption requirements
    Answer: a. To securely store, manage, and control access to sensitive cloud data.aembit+1
32. What access group strategy enhances secret security?
    a. Organize users/services in limited-access groups
    b. Provide global admin rights
    c. Disable IAM policies
    d. Ignore environment segregation
    Answer: a. Organize users/services in limited-access groups.cloud.ibm
33. What should be considered when designing secret management resource hierarchy?
    a. Which users/service IDs require access
    b. Maximum network throughput
    c. Number of CPUs required
    d. Graphics processing needs
    Answer: a. Which users/service IDs require access.cloud.ibm
34. How do secrets managers protect secrets in transit and at rest?
    a. Encryption, secure protocols, and key management service integration
    b. Logging secrets in plaintext
    c. Compressing images
    d. Adding fake data to databases
    Answer: a. Encryption, secure protocols, and key management service integration.aws.amazon+1
35. What is a hardware security module (HSM)?
    a. A device for secure cryptographic key storage and processing
    b. A high-capacity server
    c. A cloud billing system
    d. An HTTP server
    Answer: a. A device for secure cryptographic key storage and processing.aws.amazon+1
36. Why should each environment have a dedicated secrets vault?
    a. To reduce sprawl and isolate risks per environment
    b. To centralize user accounts globally
    c. To increase secret sharing
    d. To limit audit logging
    Answer: a. To reduce sprawl and isolate risks per environment.aembit
37. How can cloud-native identity federation improve secret security?
    a. Eliminates static credentials by using short-lived tokens
    b. Adds legacy system support
    c. Introduces manual credential workflows
    d. Disables encryption
    Answer: a. Eliminates static credentials by using short-lived tokens.aembit
38. What is the future trend in secrets management?
    a. Automation, AI-driven anomaly detection, and DevSecOps integration
    b. Manual credential handling
    c. Increased plaintext logging
    d. Removal of audit trails
    Answer: a. Automation, AI-driven anomaly detection, and DevSecOps integration.interviewquizz
39. Which of these is NOT a secret management best practice?
    a. Share secrets to all team members
    b. Rotate secrets regularly
    c. Audit access
    d. Use dynamic secrets
    Answer: a. Share secrets to all team members.interviewquizz
40. Which AWS service helps find hardcoded secrets in code?
    a. CodeGuru Reviewer
    b. EC2 Manager
    c. Lambda Function
    d. Redshift Analyzer
    Answer: a. CodeGuru Reviewer.aws.amazon
41. How can secret access be monitored?
    a. Logging and alerts for suspicious activities
    b. Ignoring access requests
    c. Disabling user roles
    d. Deleting access logs regularly
    Answer: a. Logging and alerts for suspicious activities.interviewquizz
42. Which cloud service integrates with LDAP for centralized secret authentication?
    a. HashiCorp Vault
    b. Google Drive
    c. AWS S3
    d. Heroku ConfigVars
    Answer: a. HashiCorp Vault.interviewquizz
43. What type of secrets can be injected into serverless functions?
    a. API keys, database passwords, tokens, certificates
    b. Deployment logs
    c. Non-sensitive public data
    d. Compressed images
    Answer: a. API keys, database passwords, tokens, certificates.cloud.google+1
44. What is required for Cloud Run to use a secret?
    a. Service account with Secret Manager access permission
    b. Root user of the cloud project
    c. EC2 instance credentials
    d. External public keys only
    Answer: a. Service account with Secret Manager access permission.cloud.google
45. How do resource groups help in secrets management?
    a. Allow segregation of secrets per project environment
    b. Increase bandwidth for secrets
    c. Enhance machine learning performance
    d. Reduce network latency
    Answer: a. Allow segregation of secrets per project environment.cloud.ibm
46. What is a challenge with legacy systems regarding secrets?
    a. Federation and automation may not be feasible
    b. Increased GPU needs
    c. Minimum network speed requirement
    d. Direct hardware access
    Answer: a. Federation and automation may not be feasible.aembit
47. Which secrets management tool is multi-cloud compatible?
    a. HashiCorp Vault
    b. AWS S3
    c. Azure Logic Apps
    d. DigitalOcean Block Storage
    Answer: a. HashiCorp Vault.interviewquizz
48. Why should environment variables pin secrets to a particular version?
    a. Avoid accidental updates from secret rotation
    b. Increase boot time
    c. Lower encryption standards
    d. Boost debugging capabilities
    Answer: a. Avoid accidental updates from secret rotation.cloud.google
49. What can happen if cached secrets are not secured?
    a. Exposed secrets lead to vulnerabilities
    b. Faster deployment times
    c. Automatic credential rotation
    d. Enhanced debugging
    Answer: a. Exposed secrets lead to vulnerabilities.interviewquizz
50. What is the recommended strategy for organizing cloud secrets?
    a. Organize by environment and restrict access via IAM policies and access groups
    b. Store all secrets in one public location
    c. Never audit secret access
    d. Disable encryption for all secrets
    Answer: a. Organize by environment and restrict access via IAM policies and access groups.aembit+1

1. https://www.interviewquizz.com/secrets-management-services-interview-question-answer
2. https://cloud.google.com/run/docs/configuring/services/secrets
3. https://docs.aws.amazon.com/secretsmanager/latest/userguide/best-practices.html
4. https://aembit.io/blog/best-practices-for-secrets-management-in-the-cloud/
5. https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-best-practices-organize-secrets
6. https://www.sanfoundry.com/1000-cloud-computing-questions-answers/
7. https://www.interviewbit.com/cloud-computing-mcq/
8. https://www.placementpreparation.io/mcq/cloud-computing/
9. https://www.sanfoundry.com/cloud-computing-questions-answers-cloud-security/
10. https://onlineexammaker.com/kb/30-cloud-security-quiz-questions-and-answers/
11. https://testbook.com/objective-questions/mcq-on-cloud-technology–5eea6a0d39140f30f369e30f
12. https://itexamanswers.net/7-7-2-cloud-security-quiz-answers.html
13. https://www.scribd.com/document/541792862/Cloud-Computing-MCQ-Questions-and-Answers-PDF-Tutorial
14. https://www.techtarget.com/searchcloudcomputing/quiz/Quiz-Cloud-computing-basics
15. https://www.vinsys.com/blog/aws-cloud-practitioner-certification-exam-mcqs
16. https://study.com/academy/practice/quiz-worksheet-cloud-management-overview.html
17. https://interviewkickstart.com/blogs/interview-questions/cloud-computing-mcqs-it-professionals
18. https://cloud.google.com/secret-manager/docs/best-practices
19. https://www.scribd.com/document/718595161/Cloud-Security-PostQuiz-Attempt-review
20. https://www.watelectronics.com/mcq/cloud-computing/