CN3303 - Lecture 9: Cloud Security threats

What is Cloud Security threat

• A cloud security threat is a risk that can compromise the confidentiality, integrity, or availability of cloud data.

• Cloud security threats do not affect small businesses.
• Cloud security threats are only caused by natural disasters.
• Cloud security threats are solely related to hardware failures.

Give an example of a data breach related to cloud services.

• Yahoo data breach in 2013 affecting email accounts.
• Capital One data breach in 2019 due to misconfigured AWS settings.
• Target data breach in 2013 due to point-of-sale malware.
• Equifax data breach in 2017 from a website vulnerability.

Answer explanation

Keywords "misconfigured"

What does IAM stand for, and why is it important?

• Identity and Access Management System
• Identity and Access Module
• Identity and Access Mechanism
• Identity and Access Management

What is a Denial of Service (DoS) attack?

• A Denial of Service (DoS) attack is a security measure to protect resources.
• A Denial of Service (DoS) attack is a method to enhance network performance.
• A Denial of Service (DoS) attack is an attempt to make a machine or network resource unavailable to its intended users.
• A Denial of Service (DoS) attack is a technique to increase user access to a system.

Name one key finding from the CSA report.

• Increased reliance on outdated software systems.
• Increased emphasis on inadequate Identity and Access Management.

• Reduction in workforce training programs.
• Decreased funding for technology initiatives.

Why is encryption crucial in cloud security?

• Encryption slows down data access in the cloud.
• Encryption is only necessary for on-premises data.
• Encryption is primarily used for data backup purposes.
• Encryption is crucial in cloud security because it safeguards sensitive data from unauthorized access.

What is the role of regular audits in cloud security?

• Regular audits are only necessary for financial records.
• Audits are primarily used to increase storage capacity.
• Regular audits are not relevant to cloud security.
• Regular audits are essential for identifying vulnerabilities, ensuring compliance, and improving overall cloud security.

Define "Advanced Persistent Threat."

• A method to enhance network security by blocking all incoming traffic.
• A prolonged and targeted cyberattack where an intruder gains unauthorized access to a network and remains undetected.

• A type of malware that self-replicates and spreads across networks.
• A brief and random cyberattack that targets multiple systems simultaneously.

How do insecure APIs pose a threat to cloud security?

• Insecure APIs pose a threat to cloud security by exposing sensitive data and enabling unauthorized access.
• Insecure APIs enhance cloud security by encrypting data.
• Insecure APIs only affect local servers, not cloud environments.
• Insecure APIs are primarily used for data backup and recovery.

What is Zero-Trust Architecture?

• A strategy that focuses solely on network perimeter security.
• A framework that allows unrestricted access to all users.
• A security model that requires strict identity verification for every user and device.
• A method for securing data in transit only.