Mastering Data Security in the Public Cloud

Play an AI-generated podcast conversation about this lesson

Which of the following is true about a cloud-native breach?

It does not involve the exfiltration of data to the attacker's storage location.
It is solely the responsibility of the cloud service provider.
It is caused by weakly configured or protected interfaces in a cloud deployment. (correct)
It involves the use of malware to exploit vulnerabilities in a cloud deployment.

What percentage of companies can currently audit their IaaS environments for configuration errors?

100%
99%
56%
26% (correct)

What is often the front door to a cloud-native breach?

Exploitation of vulnerabilities
Use of malware
Misconfiguration of IaaS (correct)
Lack of disaster recovery plan

What percentage of misconfigurations go unnoticed in IaaS by cloud customers?

99% (C) Signup and view all the answers

What does a disaster recovery plan aim to enable?

Recovery of data and continuation of operations (A) Signup and view all the answers

What can a rogue employee do using cloud services?

Expose an organization to a cybersecurity breach (A) Signup and view all the answers

According to a recent study, has detecting insider attacks become easier or harder since migrating to the cloud?

Harder (D) Signup and view all the answers

What is the main cause of cloud-native breaches?

Misconfiguration of cloud services (B) Signup and view all the answers

What is the purpose of cybersecurity planning?

To enable the recovery of data and continuation of operations (A) Signup and view all the answers

What percentage of companies can currently detect insider attacks since migrating to the cloud?

100% (B) Signup and view all the answers

Which of the following challenges arises in maintaining a secure cloud environment?

Limited control over cloud data (B) Signup and view all the answers

What is one of the challenges in maintaining visibility into cloud data?

Cloud services accessed outside of the corporate network (A) Signup and view all the answers

Why are access controls based on the traditional datacenter network perimeter no longer effective in a cloud environment?

Users can access cloud applications and data from any location or device (D) Signup and view all the answers

What is one of the compliance challenges in a cloud environment?

Adhering to regulatory requirements such as HIPAA and PCI (D) Signup and view all the answers

What is a unique characteristic of data breaches in the cloud compared to on-premises breaches?

Data theft often occurs using native functions of the cloud (A) Signup and view all the answers

Why is it challenging to maintain control over cloud data in a third-party cloud service provider's environment?

IT teams have less access to data compared to when they controlled servers on their own premises (A) Signup and view all the answers

What type of access can users have to cloud applications and data in a cloud environment?

From any location or device (B) Signup and view all the answers

What is one of the challenges in maintaining compliance in a cloud environment?

Adhering to regulatory requirements such as HIPAA and PCI (D) Signup and view all the answers

Why are traditional means of monitoring network traffic not effective in maintaining visibility into cloud data?

Cloud services are accessed outside of the corporate network (C) Signup and view all the answers

What is one of the challenges in maintaining control over cloud data in a cloud environment?

Limited access to underlying physical infrastructure (A) Signup and view all the answers