Disclaimer:
Educational Use Only:
The website links provided are to be used strictly for educational and knowledge-gaining purposes only.
No Misuse:
Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.
Respect for Websites and Businesses:
Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.
Acknowledge Value of Knowledge:
Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.
No Endorsement:
The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.
User Responsibility:
By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.
- Which of the following is a primary reason to deactivate default accounts in cloud computing environments?
a. Improve system performance
b. Prevent unauthorized access
c. Reduce storage usage
d. Enable multi-tenancy
Answer: b. Prevent unauthorized accesscloud.google+1 - What type of account should be deactivated first in a new cloud environment?
a. Service Accounts
b. Guest Accounts
c. Default administrative accounts
d. User-created accounts
Answer: c. Default administrative accountsesecurityplanet+1 - Which risk is most associated with leaving default accounts enabled in a cloud system?
a. Increased bandwidth usage
b. Security vulnerabilities
c. Licensing issues
d. Compliance with cloud standards
Answer: b. Security vulnerabilitiesesecurityplanet - In Google Cloud, what is the recommended action for unused default service accounts?
a. Log them
b. Delete them immediately
c. Disable them
d. Assign more roles
Answer: c. Disable themcloud.google - What happens if a default service account is deleted in Google Cloud before disabling it?
a. It can be restored automatically
b. All related IAM bindings are retained
c. IAM bindings are lost
d. No impact on resources
Answer: c. IAM bindings are lostcloud.google - Disabling default accounts in cloud environments is part of which general security practice?
a. Data encryption
b. Principle of least privilege
c. Redundant networking
d. Rate limiting
Answer: b. Principle of least privilegeesecurityplanet+1 - Which default account is commonly found in AWS cloud environments?
a. Compute Engine default service account
b. Root account
c. Cloud SQL account
d. Lambda user
Answer: b. Root accountplacementpreparation+1 - What is a recommended practice after disabling a default account in the cloud?
a. Share credentials
b. Audit use logs
c. Increase permissions
d. Enable legacy protocols
Answer: b. Audit use logsesecurityplanet - Why should default passwords be changed or the accounts disabled in the cloud?
a. Reduce operational costs
b. Avoid accidental deletion
c. Prevent brute force attacks
d. Increase latency
Answer: c. Prevent brute force attacksesecurityplanet - Which cloud provider suggests not deleting but disabling default service accounts?
a. AWS
b. Google Cloud
c. Azure
d. IBM Cloud
Answer: b. Google Cloudcloud.google - What is a potential consequence of failing to deactivate unused default accounts?
a. Service unavailability
b. Data redundancy
c. Attack surface increase
d. Cost reduction
Answer: c. Attack surface increasecloud.google+1 - Which security control is best complemented by deactivating default accounts in cloud systems?
a. Multi-factor Authentication
b. Load balancing
c. Data deduplication
d. File versioning
Answer: a. Multi-factor Authenticationlearn.microsoft+1 - How does deactivating default accounts help with compliance?
a. Enables faster backups
b. Prevents unauthorized data access
c. Promotes data analytics
d. Enables scaling
Answer: b. Prevents unauthorized data accessncsc+1 - What is the first step before deactivating a default account?
a. Change region
b. Review the account’s usage
c. Reboot servers
d. Encrypt all data
Answer: b. Review the account’s usagecloud.google+1 - Which Azure feature mandates managing default accounts for security?
a. Conditional Access
b. CDN
c. Blob Storage
d. Web Jobs
Answer: a. Conditional Accesslearn.microsoft - Which type of cloud account is most frequently overlooked for deactivation?
a. Billing admin
b. Guest user
c. Service account
d. Database admin
Answer: c. Service accountesecurityplanet+1 - What negative outcome may result from hastily deleting a default cloud service account?
a. Accidental loss of permissions
b. Reduced system speed
c. Increased license costs
d. More user support requests
Answer: a. Accidental loss of permissionscloud.google - Which is NOT a valid reason to deactivate a default account?
a. Enhance security
b. Comply with regulations
c. Ensure resource isolation
d. Increase account sharing
Answer: d. Increase account sharingncsc+1 - Which is best practice after deactivating default accounts?
a. Document the change
b. Restart the cloud portal
c. Reuse the credentials
d. Lower storage quotas
Answer: a. Document the changeesecurityplanet - In cloud environments, default accounts are often enabled for:
a. Initial configuration
b. Routine maintenance
c. Automated billing
d. Disaster recovery
Answer: a. Initial configurationcloud.google+1 - Which auditing process can discover unused default accounts?
a. Network sniffing
b. Identity and Access Management (IAM) review
c. Disk performance monitoring
d. Log compression
Answer: b. IAM reviewesecurityplanet+1 - What should be verified before disabling a default account?
a. System memory
b. Whether any services depend on it
c. Usage of spot instances
d. Encryption algorithm used
Answer: b. Whether any services depend on itcloud.google+1 - Which statement about cloud default accounts is true?
a. They never have administrator access
b. They may have unrestricted access by default
c. They require multi-factor authentication by default
d. They cannot be deactivated
Answer: b. They may have unrestricted access by defaultcloud.google+1 - When deactivating a default account, what backup measure should be taken?
a. None
b. Assign an alternate admin
c. Create unmonitored accounts
d. Increase storage
Answer: b. Assign an alternate adminlearn.microsoft - What should organizations use instead of default accounts for regular management?
a. Shared credentials
b. Dedicated admin accounts
c. Anonymous accounts
d. Hard-coded credentials
Answer: b. Dedicated admin accountslearn.microsoft+1 - Why are default cloud accounts targeted by attackers?
a. They are always inactive
b. Frequently use weak, known credentials
c. Are encrypted by default
d. Have no critical roles
Answer: b. Frequently use weak, known credentialsesecurityplanet - Deactivating default accounts aligns with which security framework?
a. Zero Trust
b. Open Access
c. BYOD
d. Legacy Compliance
Answer: a. Zero Trustncsc+1 - Deactivating a default account should be followed by:
a. Disabling notifications
b. Logging the action
c. Ignoring audit trails
d. Downgrading service plans
Answer: b. Logging the actionesecurityplanet - On Microsoft Entra ID, what is the effect of disabling security defaults?
a. Security is improved
b. Security defaults are turned off
c. Account activity increases
d. More users are enrolled
Answer: b. Security defaults are turned offlearn.microsoft - What documentation helps ensure default accounts are properly managed?
a. Security policies
b. Marketing brochures
c. Sales reports
d. Capacity plans
Answer: a. Security policiescloud.google+1 - What is a crucial timing for deactivating default accounts?
a. After data migration
b. After initial configuration is complete
c. Before system patching
d. After every reboot
Answer: b. After initial configuration is completecloud.google+1 - Why is it risky to keep default cloud accounts enabled?
a. May reveal system architecture
b. Can provide easy access for attackers
c. Reduces automation
d. Overrides firewall rules
Answer: b. Can provide easy access for attackersesecurityplanet - Which Google Cloud action helps avoid accidental loss of permissions for default accounts?
a. Deleting accounts
b. Only disabling them first
c. Changing their passwords
d. Modifying resource quotas
Answer: b. Only disabling them firstcloud.google - Which role often has unrestricted access in a default root/admin account?
a. Reader
b. Contributor
c. Owner
d. Auditor
Answer: c. Owneresecurityplanet - How often should a cloud IAM audit be performed to check for default account usage?
a. Annual
b. Only once at setup
c. Regularly scheduled intervals
d. Only during incidents
Answer: c. Regularly scheduled intervalscloud.google+1 - Which tool is typically used to manage deactivation of default accounts in AWS?
a. EC2 CLI
b. IAM Console
c. RDS Dashboard
d. CloudWatch
Answer: b. IAM Consoleplacementpreparation - What permission scope should be assigned to accounts replacing defaults?
a. Full access
b. Least privilege necessary
c. Root privileges
d. Global access
Answer: b. Least privilege necessarycloud.google+1 - Organizations should ensure emergency access via:
a. Retaining a limited privileged account
b. Documenting passwords in code
c. Disabling all admin accounts
d. Leaving default login active
Answer: a. Retaining a limited privileged accountlearn.microsoft - Which is NOT an outcome of deactivating default accounts?
a. Reduced risk of unauthorized access
b. Lower compliance exposure
c. Higher risk of external sharing
d. Implementation of best practice
Answer: c. Higher risk of external sharingncsc+1 - Which is a key organizational benefit of disabling unused default accounts?
a. Reduces cost
b. Bolsters security posture
c. Automatically generates SLA reports
d. Increases user quotas
Answer: b. Bolsters security posturencsc+1 - Which Amazon AWS feature helps detect unused default accounts?
a. CloudTrail
b. Elastic Beanstalk
c. Inspector
d. Route 53
Answer: a. CloudTrailplacementpreparation - Cloud security best practices recommend what for default administrative accounts?
a. Direct sharing with all admins
b. Immediate disablement or strong controls
c. Reuse on all projects
d. Ignoring logins
Answer: b. Immediate disablement or strong controlsesecurityplanet+1 - What information should be captured when deactivating a default account?
a. Deactivation reason and supporting evidence
b. Marketing campaign details
c. Backup storage size
d. User profile pictures
Answer: a. Deactivation reason and supporting evidenceesecurityplanet - What challenge can arise after deactivating a default service account in cloud infrastructure?
a. Service outages if dependencies exist
b. Data duplication
c. Storage under-utilization
d. Performance improvements
Answer: a. Service outages if dependencies existcloud.google - Which of these is NOT recommended after deactivating a default account?
a. Monitoring logs for anomalies
b. Deleting all backups
c. Reviewing IAM policies
d. Updating documentation
Answer: b. Deleting all backupsesecurityplanet - Which default account action is recommended by both Google Cloud and Microsoft Azure?
a. Deletion
b. Disabled or tightly controlled
c. Shared with all admins
d. Set to public
Answer: b. Disabled or tightly controlledlearn.microsoft+1 - Following the deactivation of a default account, what is the next best step?
a. Ignore IAM recommendations
b. Begin regular audits
c. Disclose credentials publicly
d. Disable MFA
Answer: b. Begin regular auditscloud.google+1 - Why is documenting deactivation actions important?
a. For future troubleshooting and audit trails
b. To increase account privileges
c. To speed up onboarding
d. For marketing purposes
Answer: a. For future troubleshooting and audit trailsncsc+1 - The default ‘root’ account in AWS should:
a. Be used for day-to-day management
b. Have MFA enabled and remain unused
c. Be deleted
d. Used for billing only
Answer: b. Have MFA enabled and remain unusedplacementpreparation+1 - Which is a sign that a default account may have been compromised?
a. Frequent password changes
b. Unusual or unauthorized activities in logs
c. Regular documentation updates
d. Scheduled backups fail
Answer: b. Unusual or unauthorized activities in logsesecurityplanet
- https://cloud.google.com/iam/docs/best-practices-service-accounts
- https://www.esecurityplanet.com/cloud/cloud-security-best-practices/
- https://www.placementpreparation.io/mcq/aws/
- https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults
- https://www.ncsc.gov.uk/collection/cloud/the-cloud-security-principles
- https://cloud.google.com/resource-manager/docs/secure-by-default-organizations
- https://www.placementpreparation.io/mcq/cloud-computing/
- https://www.scribd.com/document/588289683/1100-TOP-Cloud-Computing-Objective-Questions-Answers-MCQs
- https://testbook.com/objective-questions/mcq-on-cloud-technology–5eea6a0d39140f30f369e30f
- https://hungrymind.in/wp-content/uploads/2020/10/Final-Year-Computer-Engineering-Cloud-Computing-MCQs.pdf
- https://www.studocu.com/in/document/savitribai-phule-pune-university/computer-engineering/cloud-computing-mcq-all-unit-1/22998547
- https://www.cliffsnotes.com/study-notes/12946726
- https://cloud.google.com/iam/docs/best-practices-for-managing-service-account-keys
- https://www.scribd.com/document/691297348/cse423-mcqs
- https://community.atlassian.com/forums/Jira-Service-Management/Best-practice-for-user-account-delete-or-leave-on-deactivate/qaq-p/1142691
- https://support.google.com/cloud/answer/6262505?hl=en
- https://www.watelectronics.com/mcq/cloud-computing/
- https://delinea.com/blog/service-accounts-in-the-cloud
- https://learn.microsoft.com/en-us/azure/storage/blobs/security-recommendations
- https://www.hirist.tech/blog/top-30-cloud-computing-interview-questions-and-answers/