Cloud Security and Cybersecurity Quiz

Which of the following is a primary function of a Cloud Access Security Broker (CASB)?

• Encrypting all data stored on local devices

• Monitoring and enforcing security policies for cloud applications

• Managing physical security of data centres

• Providing internet connectivity to cloud services

What is the first step in implementing a CASB solution in an organisation?

• Selecting a cloud service provider

• Identifying and assessing cloud applications in use

• Installing antivirus software

• Upgrading network hardware

Which of the following is considered a best practice when configuring a firewall?

• Allowing all incoming traffic by default

• Using a default password for firewall management

• Applying the principle of least privilege

• Disabling logging features

Which compliance standard is specifically designed for protecting health information in Australia?

• PCI DSS

• ISO/IEC 27001

• Australian Privacy Principles (APPs)

• GDPR

What is the main purpose of threat detection in cloud environments?

• To increase storage capacity

• To identify and respond to security incidents

• To reduce internet speed

• To manage billing and subscriptions

Which of the following is a common data loss prevention (DLP) technique?

• Disabling all user accounts

• Encrypting sensitive data before transmission

• Allowing unrestricted file sharing

• Ignoring audit logs

What does Identity and Access Management (IAM) primarily control?

• Physical access to server rooms

• User authentication and authorisation to resources

• Internet bandwidth allocation

• Hardware maintenance schedules

Which of the following is NOT a benefit of using a CASB?

• Improved visibility into cloud usage

• Enhanced compliance with regulations

• Increased risk of data breaches

• Better control over data movement

Which firewall rule should be implemented to minimise exposure to threats?

• Allow all traffic except for known malicious IPs

• Deny all traffic except for required services and ports

• Allow all outbound traffic

• Disable all firewall rules

Which standard provides a framework for information security management systems (ISMS)?

• ISO/IEC 27001

• PCI DSS

• NIST SP 800-53

• GDPR