Cloud defense questions