Passwords are stored and protected using Key Management and IAM technologies, not security groups.

Correct!

API keys are a type of credential protected by Key Management and IAM systems, not a function of security groups.

Applications are deployed onto servers or containers within a Virtual Private Cloud (VPC), not by a security group.

Managing physical servers and data centers is the responsibility of the cloud provider.

Protecting the core global network infrastructure is a responsibility of the cloud provider.

Correct!

Maintaining the virtualization layers and networking hardware is the responsibility of the cloud provider.

Data is not simply deleted during containment, which instead focuses on isolating the compromised element.

Giving temporary access is the opposite of containment, which involves disabling accounts or isolating systems.

Correct!

Shutting down all cloud services is an overly extreme measure; containment focuses on isolating only the compromised account or resource.

Rapid elasticity is a feature of cloud computing, not a security threat.

Global availability is a benefit of cloud computing, not a security threat.

Correct!

Automatic scaling is a feature of cloud computing, not a security threat.