Which measures should be taken to secure a Google Firebase database?
(Choose Three)
Response:

• A. Allowing direct database access from the internet to increase performance.
• B. Encrypting data stored in Firebase at rest and in transit.
• C. Ensuring that database backups are publicly accessible for transparency.
• D. Configuring strong security rules to define who has access.
• E. Monitoring and logging all access and queries to detect anomalies.

Which of the following best describes the principle of least privilege as applied to cloud storage?
Response:

• A. Granting users only the permissions necessary to perform their job functions
• B. Ensuring all users have encrypted access to data
• C. Implementing redundant data storage
• D. Granting every user admin rights to ensure full access to data for business needs

Your organization has adopted a multicloud strategy, and you are responsible for securing credentials across multiple cloud providers. Recently, an attacker exploited an exposed instance metadata API in one of your cloud environments. What steps should you take to secure the multicloud environment and prevent similar attacks?
(Choose three)
Response:

• A. Disable the use of instance metadata APIs for all cloud instances
• B. Ensure instance metadata APIs are restricted and only accessible from trusted sources
• C. Hardcode credentials in all applications for better access control
• D. Rotate all credentials and enforce encryption for all credentials stored in the cloud
• E. Implement identity federation to reduce the reliance on long-term credentials

What is the primary concern when using cloud storage services without proper access control?
Response:

• A. Data exfiltration by unauthorized users
• B. High storage costs
• C. Slow access times
• D. Overuse of encryption algorithms