I disagree with protocol vulnerabilities. The answer is about insecure implementation of API https://www.imperva.com/blog/top-10-cloud-security-concerns/

Agreed, as stated the user is using a Web browser, so it cannot be API, the correct answer is C

API and Internet Browser? Definitely not!

Selected Answer: C Vulnerabilities within protocol: Cross-site scripting (XSS) vulnerabilities: These allow attackers to inject malicious scripts into web pages viewed by other users.

Vulnerabilities within protocols that can expose confidential data. That is C, not D!

A - Misconfiguration of Infra, which leads to unauthorized access is CORRECT for me --> it combines the 2 most common security issues of public cloud in one answer (see link below) Question says BROWSER so API is probably not an option (D). Vulnerabilities within protocol (C) - this is not specific to cloud, PROTOCOLS are used everywhere and they are years old, tuned standards with minimum vulnerabilities. Option B - connection stability (?) --> means service availability, which is also a security aspect but it is not such a big issue as option A and networks are reliable today (risk is DoS / DDoS but they are not asking about it). A is correct. https://www.checkpoint.com/cyber-hub/cloud-security/what-is-cloud-security/top-cloud-security-issues-threats-and-concerns/

another showcase question for why Cisco exams are utter garbage.

Selected Answer: C When using an Internet browser to access cloud-based services, the main risk is vulnerabilities in the communication protocols (e.g., HTTP, HTTPS, TLS, or WebSockets). Attackers can use these weaknesses through man-in-the-middle (MITM) attacks, SSL/TLS weaknesses, or browser-based exploits.

Answer is D Vulnerabilities in protocols that can expose confidential data

That is also my answer. You are responsible for configuring users and authentication / authorization for your Cloud, so if you do that in a dumb way it is insecure. Your AWS instances might be publicly reachable over SSL with a Cisco123 password - what do you think ?

Selected Answer: D Should be D. A poorly designed or implemented API could let users access confidential data unintentionally, e.g. with a typo in the browser address box. A. Wrong. Misconfigured infra, not specifically vulnerable to browsers B. Wrong. Not that significant, although it is an availability issue from a security perspective, but it also has nothing to do with a browser. C. Wrong, vulnerable within protocol? then which protocol? specific to a browser? then should be http or https, however, that also affects non-cloud-based services as well, right?

Selected Answer: D insecure API: A malicious user gained access to an organization's database from a cloud-base application programming interface that lacked strong authentication control. (from 350 - 701 practice exam)

Selected Answer: A VM might be publicly reachable and the WebUI is weakly protected by a default password like Cisco123.

I would go with C

I think D

Correct answer C. I checked with securitytut

Selected Answer: D I think it is about securing APIs. A web API can still be accessed via a web browser. https://stackoverflow.com/questions/29105007/how-to-make-basic-rest-api-calls-using-a-browser

My answer is c