nerdexam
CompTIA

CV0-002 · Question #506

A company's cloud administrator receives an advisory notice from the CSP. The CSP runs quarterly tests on its platform and customer's environments. The cloud administrator reads the notice and sees…

The correct answer is C. Vulnerability testing. Discovering an environment is at risk of buffer over-read exploits indicates that the Cloud Service Provider (CSP) is performing vulnerability testing.

Security

Question

A company's cloud administrator receives an advisory notice from the CSP. The CSP runs quarterly tests on its platform and customer's environments. The cloud administrator reads the notice and sees the company's environment is at risk of buffer over-read exploits. Which of the following tests is the CSP MOST likely running on a quarterly basis?

Options

  • ALoad testing
  • BData integrity testing
  • CVulnerability testing
  • DPerformance testing

How the community answered

(38 responses)
  • B
    5% (2)
  • C
    92% (35)
  • D
    3% (1)

Why each option

Discovering an environment is at risk of buffer over-read exploits indicates that the Cloud Service Provider (CSP) is performing vulnerability testing.

ALoad testing

Load testing assesses system performance under stress, not security vulnerabilities or exploits.

BData integrity testing

Data integrity testing ensures data accuracy and consistency, which is distinct from identifying security exploits.

CVulnerability testingCorrect

Vulnerability testing is the process of identifying, quantifying, and reporting security weaknesses in systems and applications, directly aimed at discovering potential security flaws like buffer over-read exploits. Cloud Service Providers frequently conduct such tests to maintain the security posture of their platform and shared infrastructure, proactively notifying customers of identified risks.

DPerformance testing

Performance testing evaluates speed, responsiveness, and stability, not the presence of security exploits.

Concept tested: Types of security testing - vulnerability scanning

Source: https://learn.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-governance-strategy#gs-3-conduct-penetration-testing-and-vulnerability-assessments

Topics

#Vulnerability Testing#Security Exploits#CSP Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CV0-002 Practice