CompTIA SecurityX Practice Questions: Cloud Security

16 free, exam-style CompTIA SecurityX (CAS-005) practice questions covering Cloud Security. Each question shows the correct answer and a clear explanation. Ready for the real thing? Take the full timed quiz below.

🚀 Take the full CompTIA SecurityX quiz 📘 CompTIA SecurityX study guide

Q1. Which of the following is a key security consideration when deploying serverless functions in the cloud?

Explanation: Serverless functions should follow the principle of least privilege to minimize attack surfaces. Learn more.

Q2. Which of the following is a critical security control for Kubernetes clusters?

Explanation: Kubernetes requires strict network segmentation and pod restrictions. Learn more.

Q3. What is the PRIMARY security risk of Infrastructure as Code (IaC) misconfigurations?

Explanation: IaC errors can propagate security flaws at scale. Learn more.

Q4. What is the PRIMARY security benefit of using service mesh architecture?

Explanation: Service meshes provide built-in mTLS and security policies. Learn more.

Q5. What is the PRIMARY security risk of over-permissioned cloud IAM roles?

Explanation: Excessive permissions enable privilege escalation. Learn more.

Q6. What is the PRIMARY purpose of a cloud security posture management (CSPM) tool?

Explanation: CSPM tools identify and remediate cloud misconfigurations. Learn more.

Q7. What is the PRIMARY security benefit of using SPIFFE/SPIRE for identity management?

Explanation: SPIFFE provides cryptographic identity for workloads. Learn more.

Q8. What is the PRIMARY security consideration for multi-cloud deployments?

Explanation: Security must be uniformly enforced across different clouds. Learn more.

Q9. What is the PRIMARY security consideration for service mesh implementations?

Explanation: Service meshes require robust certificate management for mTLS. Learn more.

Q10. Which of the following is a key security control for mitigating side-channel attacks in cloud environments?

Explanation: Cloud multi-tenancy requires protection against cross-VM attacks. Learn more.

Q11. Which cloud deployment model provides the MOST control over security configurations?

Explanation: Private clouds offer dedicated infrastructure with full control. Learn more.

Q12. What is the PRIMARY security concern with serverless architectures?

Explanation: Event-driven functions (e.g., AWS Lambda) may process malicious input. Learn more.

Q13. Which cloud service model provides the MOST control over security configurations?

Explanation: IaaS (e.g., AWS EC2) allows full control over OS and network settings. Learn more.

Q14. Which control gives visibility and policy enforcement for sanctioned and unsanctioned cloud application use?

Explanation: A cloud access security broker helps discover cloud usage and enforce security policy between users and cloud services. Learn more.

Q15. Which cloud-native identity risk occurs when a role trusts any principal in another account?

Explanation: Broad cross-account trust can allow unintended principals to assume roles and access resources. Learn more.

Q16. Which cloud storage control prevents public exposure even if an object ACL is misconfigured?

Explanation: Public access block controls provide a guardrail against accidental public object exposure. Learn more.

More CompTIA SecurityX practice topics