MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which attack floods a cloud service with massive traffic to make it inaccessible?
   a. Account hijacking
   b. Denial-of-Service (DoS)
   c. Cryptomining
   d. Cookie poisoning
   Answer: baquasec
2. What describes the unauthorized acquisition of someone’s cloud credentials?
   a. Side-channel attack
   b. Account hijacking
   c. Insider threat
   d. Data breach
   Answer: bdarktrace+1
3. Which attack targets vulnerabilities in APIs that are poorly secured?
   a. Insecure API attacks
   b. Phishing
   c. Cryptomining
   d. Malware injection
   Answer: aaquasec+1
4. What is the main consequence of a cloud security misconfiguration?
   a. Service upgrade
   b. Unauthorized access
   c. Improved scalability
   d. Faster backups
   Answer: bdarktrace+1
5. Which external threat inserts malicious software into the cloud infrastructure?
   a. Cloud malware injection
   b. Insider threat
   c. Advanced persistent threat
   d. Secure API implementation
   Answer: aaquasec
6. How does cookie poisoning harm cloud applications?
   a. It destroys servers
   b. Modifies browser cookies for unauthorized access
   c. Encrypts all stored files
   d. Disables backups
   Answer: baquasec
7. Which external attack exploits information leaked through physical system processes?
   a. Account hijacking
   b. Denial-of-Service
   c. Side-channel attack
   d. Cryptomining
   Answer: caquasec
8. If an attacker uses stolen credentials to run cryptocurrency mining operations, what is this attack called?
   a. Data breach
   b. Cloud cryptomining attack
   c. Cookie poisoning
   d. Side-channel attack
   Answer: baquasec
9. What is phishing in the context of cloud security?
   a. Malicious links sent to users for credential theft
   b. Resource pooling
   c. Server clustering
   d. Hypervisor management
   Answer: adarktrace+1
10. Which are “Shadow APIs” in cloud attacks?
    a. Documented APIs with high security
    b. Untracked and undocumented APIs exploited by attackers
    c. APIs managed by the provider
    d. Restricted user APIs
    Answer: baquasec
11. Which real-world attack exploited a misconfigured cloud database revealing millions of users’ data?
    a. Kaseya ransomware
    b. Cognyte exposure
    c. Raychat bot attack
    d. Facebook leak
    Answer: baquasec
12. What does an attacker gain during account hijacking?
    a. Remote server management keys
    b. Control over cloud resources and data
    c. Only read access
    d. Administrative privileges on hypervisors
    Answer: bdarktrace+1
13. Which process can limit external attacks by strictly managing who gets access?
    a. Public key cryptography
    b. Access control mechanisms
    c. Cookie storage management
    d. Proxy filtering
    Answer: bdarktrace+1
14. What can a cloud misconfiguration lead to?
    a. System acceleration
    b. Data breach
    c. Encryption loss
    d. Secure backup
    Answer: bapriorit+1
15. How is a Denial-of-Service attack typically detected in cloud environments?
    a. By monitoring abnormal traffic spikes
    b. Physical server inspection
    c. Cookie analysis
    d. Script debugging
    Answer: aonlineexammaker+1
16. What can prevent malware injection attacks in the cloud?
    a. Enabling guest access
    b. Patching vulnerabilities and avoiding infected files
    c. Disabling firewalls
    d. Downgrading encryption
    Answer: bapriorit+1
17. What external threat is harder to block due to the insider’s legitimate access?
    a. Phishing attacks
    b. Insider threats
    c. DoS attacks
    d. Data exfiltration
    Answer: bdarktrace+1
18. An attacker manipulates cookies to impersonate legitimate users—this is:
    a. Malware injection
    b. Cookie poisoning
    c. Side-channel attack
    d. Insecure API attack
    Answer: baquasec
19. How do attackers leverage insecure APIs?
    a. Unauthorized data access and injection attacks
    b. Increasing server uptime
    c. Network virtualization
    d. Key management
    Answer: adarktrace+1
20. Which technique allows attackers to listen to resource usage patterns in virtualized hosts?
    a. Cookie poisoning
    b. Side-channel attack
    c. Insider threat
    d. API abuse
    Answer: baquasec
21. External attackers may use what method to make cloud resources unavailable?
    a. Data enrichment
    b. Denial-of-Service (DoS)
    c. Role escalation
    d. Credential obfuscation
    Answer: bproofpoint+1
22. Why are cloud cryptomining attacks costly?
    a. They increase licensing costs
    b. They exploit and consume expensive computing resources without consent
    c. They hack user interfaces
    d. They bypass API validation
    Answer: baquasec
23. What results from the accidental exposure of cloud storage buckets?
    a. Network optimization
    b. Data breach
    c. Resource pooling
    d. Secure backup
    Answer: bapriorit+2
24. When an external attacker uses malware in SaaS or PaaS to reroute traffic, it is known as:
    a. Guest hopping
    b. Malware injection
    c. Cookie poisoning
    d. Side-channel attack
    Answer: baquasec
25. Which is a correct external threat mitigation practice?
    a. Not encrypting data
    b. Enforcing secure API access
    c. Disabling threat detection
    d. Open network ports
    Answer: baquasec
26. Which attack type can remain undetected for long periods and move across workloads?
    a. Advanced persistent threat
    b. Cookie poisoning
    c. Data poisoning
    d. API misconfiguration
    Answer: acrowdstrike
27. What is a major risk due to third-party cloud integrations?
    a. Phishing risk
    b. Insecure API exposures
    c. Cryptomining acceleration
    d. Backup loss
    Answer: bcloudsecurityalliance+1
28. What is the purpose of cloud encryption for external attack prevention?
    a. Making data unreadable to unauthorized parties
    b. Speeding up data transfer
    c. Increasing storage
    d. Generating audit logs
    Answer: aaquasec
29. What type of external attack uses botnets to automate threats against cloud apps?
    a. DDoS and bot attack
    b. Side-channel attack
    c. Phishing
    d. Hypervisor hijacking
    Answer: adarktrace+1
30. Public cloud environments are especially vulnerable to which external attack type?
    a. Distributed Denial-of-Service (DDoS)
    b. Internal sabotage
    c. Hosted malware scanning
    d. Resource scheduling
    Answer: aproofpoint+1
31. What best describes “user account compromise” in cloud computing?
    a. Users voluntarily share credentials
    b. Attackers trick or exploit users for access
    c. Slow API requests
    d. Server hardware modification
    Answer: baquasec
32. Which external attack targets unpatched or outdated cloud software?
    a. Zero-day exploit
    b. Data masking
    c. Virtual machine relocation
    d. Role-based privilege escalation
    Answer: acrowdstrike
33. What is hyperjacking in the context of cloud security?
    a. External attackers taking control of a hypervisor
    b. Encrypting cookies
    c. Overloading APIs
    d. Misconfiguring VM storage
    Answer: ascribd
34. Which factor can increase the surface for external cloud attacks?
    a. Poor IAM configuration
    b. Accelerated storage
    c. Cloud monitoring tools
    d. Enhanced backup routines
    Answer: aexabeam+1
35. What is a real-world example of a supply chain attack targeting cloud providers?
    a. Kaseya ransomware attack
    b. Raychat bot attack
    c. Google Cloud API leak
    d. Insider sabotage
    Answer: aaquasec
36. What external threat does a cloud cryptomining attack exploit?
    a. Resource theft by running unauthorized cryptomining code
    b. Invoice generation acceleration
    c. Secure protocol enforcement
    d. Data encryption strengthening
    Answer: aaquasec
37. Which cloud external attack manipulates API parameters for unauthorized actions?
    a. API injection attacks
    b. Cookie poisoning
    c. Guest hopping
    d. Malware injection
    Answer: aaquasec
38. Which cloud attack is most associated with credential-based unauthorized access?
    a. Account hijacking
    b. Denial-of-Service
    c. Side-channel attack
    d. Cookie poisoning
    Answer: adarktrace+1
39. How does the complexity of cloud environments contribute to attack vulnerability?
    a. It leads to misconfiguration and accidental exposures
    b. It reduces attack vectors
    c. It strengthens encryption
    d. It lowers the number of users
    Answer: aapriorit+1
40. What is an effective way to detect unusual activity indicating external attack attempts?
    a. Security monitoring and logging
    b. Reducing password complexity
    c. Increasing API count
    d. Disabling encryption
    Answer: aonlineexammaker
41. Why is data loss a frequent result of cloud external attacks?
    a. Attackers target storage buckets and delete or steal data
    b. Frequent hardware upgrades
    c. Backup redundancy
    d. Resource scaling issues
    Answer: aapriorit+1
42. What is a “guest hopping” attack?
    a. An attacker moves laterally to compromise multiple virtual guest machines
    b. Encrypted API request
    c. Slow query poisoning
    d. Automated audit log manipulation
    Answer: ascribd
43. How can external attackers exploit cloud storage misconfiguration?
    a. By accessing unprotected public buckets
    b. Through resource pooling
    c. By enforcing multi-factor authentication
    d. Secure boot loading
    Answer: aapriorit+1
44. What is the attack called where malicious VM compromises its host and other VMs?
    a. Side-channel attack
    b. Guest hopping
    c. Cookie poisoning
    d. Hyperjacking
    Answer: bscribd+1
45. What could have prevented Raychat’s cloud database compromise?
    a. Proper database configuration security
    b. Increased storage capacity
    c. Disabling user logins
    d. Hosting on a single server
    Answer: aaquasec
46. What is the goal of external data exfiltration attacks on the cloud?
    a. To steal sensitive data and transfer outside organization boundaries
    b. Data compression
    c. Increasing latency
    d. Role-based privilege reduction
    Answer: aapriorit+1
47. Which external attack leverages fake cloud backup solutions to steal data?
    a. Phishing and malware injection
    b. Data encryption
    c. Hypervisor management
    d. Secure API invocation
    Answer: aapriorit+1
48. What do criminals often abuse to cause cloud service outages?
    a. Botnets and DDoS tools
    b. Secure API access
    c. Data masking routines
    d. Network redundancy
    Answer: aproofpoint+1
49. How can organizations best protect sensitive cloud data from external attack?
    a. Encrypting at rest, in transit, and during use
    b. Open network port management
    c. Unlimited resource pooling
    d. Removing IAM controls
    Answer: aaquasec
50. What is the first step to defend against all external attacks in the cloud?
    a. Security risk assessment and regular testing
    b. Increasing user access
    c. Disabling monitoring
    d. Resource over-provisioning
    Answer: aonlineexammaker+2

1. https://www.aquasec.com/cloud-native-academy/cloud-attacks/cloud-attacks/
2. https://www.darktrace.com/cyber-ai-glossary/the-most-common-cloud-security-threats
3. https://www.apriorit.com/dev-blog/523-cloud-computing-cyber-attacks
4. https://onlineexammaker.com/kb/30-cloud-security-quiz-questions-and-answers/
5. https://www.proofpoint.com/us/threat-reference/cloud-security
6. https://www.crowdstrike.com/en-us/cybersecurity-101/cloud-security/cloud-security-risks/
7. https://cloudsecurityalliance.org/artifacts/top-threats-to-cloud-computing-2024
8. https://www.scribd.com/document/807732704/CCS335-CLOUD-COMPUTING-MCQ-Questions
9. https://www.exabeam.com/explainers/cloud-security/cloud-security-threats-top-threats-and-3-mitigation-strategies/
10. https://www.sanfoundry.com/1000-cloud-computing-questions-answers/
11. https://www.scribd.com/document/541792862/Cloud-Computing-MCQ-Questions-and-Answers-PDF-Tutorial
12. https://www.watelectronics.com/mcq/cloud-computing/
13. https://www.sanfoundry.com/computer-fundamentals-questions-answers-cloud-computing/
14. https://vngcloud.vn/blog/muoi-hinh-thuc-tan-cong-tren-dien-toan-dam-may
15. https://www.readmcqs.com/cloud-computing-mcq/
16. https://www.sentinelone.com/cybersecurity-101/cloud-security/cloud-security-attacks/
17. https://www.interviewbit.com/cloud-computing-mcq/
18. https://www.fortinet.com/resources/cyberglossary/types-of-cyber-attacks
19. https://www.crowdstrike.com/en-us/cybersecurity-101/cloud-security/cloud-vulnerabilities/
20. https://www.imperva.com/learn/application-security/cyber-security-threats/