ETHC303 · Quiz 2 — Term 253 (Sec 81)

Q1

How is Cloud Computing defined?

aA localized method of storing physical server hardware. bA style of computing where massively scalable IT-enabled capabilities are delivered “as a service” using Internet technologies. cA private network that restricts all external internet connections. dA physical storage medium used exclusively by the U.S. government.

✓Correct Answer: b)

Cloud computing is defined by scalable IT capability delivered “as a service” over Internet technologies — the defining traits are scale and service delivery, not local hardware (a) or network restriction (c).

Q2

What is the primary driver behind the feasibility and affordability of Equipment as a Service (EaaS)?

aConnecting all sorts of equipment and devices in the Internet of Things (IoT). bThe creation of biometric passports. cThe decline of public cloud infrastructure. dDeleting third-party tracking cookies.

✓Correct Answer: a)

EaaS became practical because IoT connectivity lets vendors monitor, meter and service equipment remotely, so equipment can be sold as an ongoing service rather than a one-off purchase.

Q3

How do automatic software updates in the cloud benefit an organization's IT department?

aThey completely eliminate the need for any internet connection. bThey force manual organization-wide updates every day. cThey save valuable IT staff time and money spent on outside IT consultation by refreshing automatically. dThey convert all SaaS programs into IaaS platforms automatically.

✓Correct Answer: c)

Suppliers refresh the software centrally, so the organization saves IT staff time and outside consultation costs. Cloud delivery still requires connectivity (a), and updates are automatic rather than manual (b).

Q4

How does a cloud-based system maintain “Quality Control” in reporting?

aBy requiring data to be manually verified by an external consultant. bBy automatically deleting older versions of files every 24 hours. cBy storing all documents in one place and in a single format so everyone accesses the same information. dBy restricting document access exclusively to big accounts.

✓Correct Answer: c)

Quality control comes from a single store and single format — one version of the truth, consistent processes, and an audit trail of revisions, instead of divergent local copies.

Q5

Why does the cloud offer “Loss prevention” compared to regular localized servers?

aIt prevents hackers from guessing user passwords entirely. bInformation remains safe and accessible from any computer with an internet connection, even if the regular computer breaks. cIt automatically encrypts the data using fingerprinting technology. dAll of the above.

✓Correct Answer: b)

Loss prevention is about data surviving the device: if the local machine is lost, stolen or broken, the data is still reachable from any connected computer. It is not a claim about passwords (a) or encryption (c).

Q6

If attackers gain access to a user's credentials via account hijacking, what critical areas of cloud computing services can they compromise?

aThe physical location of the electricity power grids. bThe confidentiality, integrity, and availability of those services. cThe capacity of physical storage drives. dThe baseline compliance protocols of W3C.

✓Correct Answer: b)

Stolen credentials put the whole CIA triad at risk — the attacker can read data (confidentiality), alter it (integrity) and disrupt or delete the service (availability).

Q7

What legal complication arises if cloud data is stored in a data center located in a different country from where the customer lives?

aThe customers could be under different laws, and local government regulations could place them out of compliance. bThe data center automatically assumes ownership of the intellectual property. cThe data is transformed into a flash cookie format automatically. dThe physical hardware immediately becomes vulnerable to power grid lightning strikes.

✓Correct Answer: a)

Data is governed by the laws of the jurisdiction it sits in, so cross-border storage can place the customer under foreign law and out of compliance with their own local regulations. Hosting does not transfer IP ownership (b).

Q8

How did local program security prior to cloud computing protect user privacy from vendors?

aBy routing all data through encrypted e-government portals. bBy utilizing the P3P protocol by default. cUser data and programs were stored locally, preventing program vendors from accessing data and usage statistics. dBy automatically converting all text files into machine fingerprints.

✓Correct Answer: c)

When both the program and its data lived on the user's own machine, the vendor had no channel to the data or to usage telemetry. Moving the program to the vendor's servers is what created that exposure.

Q9

In data mining, what is the underlying danger of utilizing Big Data profiling to sort citizens?

aIt prevents the government from tracking deadbeat parents or welfare fraud. bIt replaces all biometric identifiers with tracking cookies. cIt completely crashes local infrastructure hardware like routers and gateways. dIt creates patterns of combinations of user properties that can lead to profit-driven discrimination or targeted denial of services by discriminatory organizations.

✓Correct Answer: d)

Profiling turns combinations of attributes into categories, and those categories can then be used for discrimination or targeted denial of service — pricing, insurance, hiring or credit decisions made about a person because of the group the model puts them in.

Q10

Why is a compromise of biometric data considered “catastrophic” compared to losing a credit card or Social Security Number?

aBiometric data can only be accessed using high-speed cable lines. bBiometric data is owned legally by the cloud provider. cIt prevents the user from disabling cookies in their web browser. dBiometric data cannot be revoked or reissued.

✓Correct Answer: d)

A card or ID number can be cancelled and replaced; a fingerprint or iris cannot be revoked or reissued. Once the template leaks, the identifier is compromised permanently.

Cloud Computing, Cloud Risk &Privacy in Cyberspace

Cloud Computing, Cloud Risk &
Privacy in Cyberspace