A company wants to build a serverless application that reacts to changes in their database using Amazon DynamoDB. Which service should they consider for processing these changes?
- AWS Lambda
- Amazon EC2
- Amazon RDS
- Amazon SQS
AWS Lambda is a serverless compute service that can be triggered by changes in Amazon DynamoDB. It allows you to build applications that react to database changes without managing servers.
Which of the following can be a consequence of account hijacking?
- Data theft and loss of data control
- Improved cloud service performance
- Better user experience
- Reduced subscription costs
Account hijacking can result in data theft and loss of data control, as the attacker may manipulate or steal data. Other options are unrelated to the consequences.
Middleware is best described as:
- A component that
- A layer of software
- A program that connects
- Software that sits
Middleware is a layer of software that acts as a bridge between different software applications, helping them communicate and function together.
A disgruntled employee with elevated access rights who intentionally sabotages the company's data is classified as which type of insider threat?
- Accidental Insider
- Competent Insider
- Malicious Insider
- Negligent Insider
A "Malicious Insider" is an employee with malicious intent who abuses their access to harm the organization intentionally. This is a severe insider threat that organizations need to protect against.
A large enterprise has a policy that mandates all software patches and updates be reviewed and tested before deployment. They are considering adopting a SaaS application. What potential challenge might they face with this approach?
- Complex Licensing Agreements
- Difficulty in Customization
- Limited Control Over Updates
- Potential Security Concerns
The challenge that a large enterprise might face with adopting a SaaS application is limited control over updates. With SaaS, the provider manages updates, which can conflict with an enterprise's patch testing and deployment policy.
For complex cloud architectures, which feature of cloud monitoring tools is crucial for understanding the interplay between different services?
- Auto Scaling
- Dependency Mapping
- Log Collection
- Performance Metrics
Dependency mapping is crucial for understanding how different services in a complex architecture rely on each other, helping diagnose issues and optimize.
What is the significance of "zero trust" in the context of preventing insider threats?
- Trust is granted by default
- Trust is granted widely
- Trust is never assumed
- Trust is revoked easily
In a "Zero Trust" security model, trust is never assumed, and verification is required from anyone trying to access resources. This approach minimizes insider threats by not assuming trust based on roles or location.
In the context of cloud computing, what does the "elasticity" characteristic ensure?
- Data Encryption
- Dynamic Scalability
- Redundancy Management
- Resource Efficiency
Elasticity in cloud computing refers to the ability to dynamically and automatically scale resources up or down in response to changing workloads. It ensures efficient resource allocation, cost savings, and performance optimization.
Which cloud migration strategy involves moving an application from an on-premises environment to the cloud without making changes to its architecture?
- Refactoring (Re-architect)
- Rehosting (Lift and Shift)
- Reimagining (Full Rebuild)
- Replatforming (Lift, Tinker, and Shift)
Rehosting, also known as Lift and Shift, is a migration strategy where you move the application to the cloud as-is, without making significant architectural changes. It's a quick way to get to the cloud, but it might not fully optimize the cloud's capabilities.
A healthcare provider needs to move data to the cloud due to an expiring data center lease. They plan to optimize and leverage cloud-native services in the future. Which initial migration strategy might they employ?
- Augmenting with Cloud Services (Hybrid Cloud)
- Lift, Tinker, and Shift
- Refactoring (re-architecting)
- Rehosting (lift-and-shift)
Augmenting with cloud services, often a hybrid cloud approach, would allow the healthcare provider to quickly move data to the cloud while preparing for future optimization and integration with cloud-native services.