What is the primary purpose of data auditing and monitoring in the cloud?

To track data access and detect anomalies

A company stores sensitive documents in a cloud object storage bucket. The security team wants to prevent data exfiltration by blocking downloads of sensitive files, but also needs to allow employees to view the files in the browser. Which configuration should be used?

Encrypt the files and provide the decryption key to all employees.

Use a DLP policy that blocks downloads of sensitive files and allows only in-browser viewing.

Set the bucket to public read-only and rely on the browser to prevent downloads.

Use pre-signed URLs that expire after 5 minutes.

A company requires that all data be encrypted in transit between its on-premises network and the cloud. The data flows through a site-to-site VPN. Which additional control ensures end-to-end encryption of the data?

Enable TLS on the application layer

Enable encryption on the cloud storage service

Use a stronger VPN protocol such as IKEv2

Configure network security groups to restrict traffic

A software company needs to provide testers with a copy of the production database that includes customer names, email addresses, and order history. The test environment is not as tightly secured as production. Which technique should be applied to the data before loading it into the test environment?

Restrict access to the test environment to a small group of testers.

Tokenize all fields in the database, including order history.

Encrypt the database backup with a strong encryption key.

Replace customer names and email addresses with fictional values while preserving the format and relationships.

What is the purpose of a Hardware Security Module (HSM) in key management?

To provide backup storage for databases

To securely generate and store encryption keys in tamper-resistant hardware

EC-CouncilCertified Cloud Security Engineer

Domain 3Objective 1

Data Security in Cloud CCSE Practice Questions (Page 1)

Part of the Cloud Data Security and Operations domain, which makes up ~19% of our current practice bank.

53questions here

11free pages

12concepts

Questions 1–5

1foundation · easy
What is the primary purpose of data auditing and monitoring in the cloud?
Select an answer first
2expert · hard
A company stores sensitive documents in a cloud object storage bucket. The security team wants to prevent data exfiltration by blocking downloads of sensitive files, but also needs to allow employees to view the files in the browser. Which configuration should be used?
Select an answer first
3application · medium
A company requires that all data be encrypted in transit between its on-premises network and the cloud. The data flows through a site-to-site VPN. Which additional control ensures end-to-end encryption of the data?
Select an answer first
4application · medium
A software company needs to provide testers with a copy of the production database that includes customer names, email addresses, and order history. The test environment is not as tightly secured as production. Which technique should be applied to the data before loading it into the test environment?
Select an answer first
5foundation · easy
What is the purpose of a Hardware Security Module (HSM) in key management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCSE” is a trademark of its owner, used for identification only.