A security audit related to confidentiality controls found the following transactions occurring in the system:
GET http://gateway.securetransaction.com/privileged/api/v1/changeResource?id=123anduser=277
Which of the following solutions will solve the audit finding?
A. Using a TLS-protected API endpoint
B. Implementing a software firewall
C. Deploying a HIDS on each system
D. Implementing a Layer 4 load balancer
A cloud administrator needs to reduce the cost of cloud services by using the company's off-peak period. Which of the following would be the BEST way to achieve this with minimal effort?
A. Create a separate subscription.
B. Create tags.
C. Create an auto-shutdown group.
D. Create an auto-scaling group.
A systems administrator is provisioning VMs in a cloud environment and has been told to select an OS build with the furthest end-of-life date.
Which of the following OS builds would be BEST for the systems administrator to use?
A. Open-source
B. LTS
C. Canary
D. Beta
E. Stable
A systems administrator is configuring network management but is concerned about confidentiality.
Which of the following should the administrator configure to address this concern?
A. Community strings
B. IPSec tunnels
C. ACLs
D. SNMPv3
A cloud administrator is building a new VM for a network security appliance. The security appliance installer says the CPU clock speed does not meet the requirements.
Which of the following will MOST likely solve the issue?
A. Move the VM to a host with a faster CPU
B. Add more vCPUs to the VM
C. Enable CPU masking on the VM
D. Enable hyperthreading on the virtual host
A company changed its policy to have seven-year data retention in the public cloud. Which of the following would be the MOST cost-effective way to meet retention requirements?
A. Site mirroring
B. Automated archiving
C. Replication D. Third-party sites
A cloud architect is deploying a web application that contains many large images and will be accessed on two containers. Which of the following will MOST improve the user experience while keeping costs low?
A. Implement web servers in both continents and set up a VPN between the VPCs.
B. Implement web servers on both continents and peer the VPCs.
C. Implement a CDN and offload the images to an object storage.
D. Implement a replica of the entire solution on every continent.
A large pharmaceutical company needs to ensure it is in compliance with the following requirements:
1.
An application must run on its own virtual machine.
2.
The hardware the application is hosted on does not change. Which of the following will BEST ensure compliance?
A. Containers
B. A firewall
C. Affinity rules
D. Load balancers
A cloud security engineer needs to ensure authentication to the cloud provider console is secure. Which of the following would BEST achieve this objective?
A. Require the user's source IP to be an RFC1918 address
B. Require the password to contain uppercase letters, lowercase letters, numbers, and symbols
C. Require the use of a password and a physical token.
D. Require the password to be ten characters long
A cloud administrator is responsible for managing a VDI environment that provides end users with access to limited applications. Which of the following should the administrator make changes to when a new application needs to be provided?
A. Application security policy
B. Application whitelisting policy
C. Application hardening policy
D. Application testing policy
