Cloud Security
17 practice items · needed by 3 roles
Easy 5Medium 7Hard 5
Practice questions
- Cloud access from Podsmedium
- Who patches the VM operating system?easy
- Principle of least privilegeeasy
- Protecting the root usereasy
- What HTTPS protectseasy
- Shell access without opening port 22easy
- Security groups vs network ACLsmedium
- Giving a VM access to cloud APIsmedium
- Reading an S3 SecureTransport policymedium
- Overly broad GitHub OIDC trust policymedium
- Where to keep a database passwordmedium
- Why envelope encryptionhard
- Securing a role for a SaaS vendorhard
- CloudTrail logging was stoppedmedium
- SSRF and cloud instance metadatahard
- Is this S3 bucket public?hard
- Hidden escalation with PassRolehard