What is the primary goal of a Data Loss Prevention (DLP) solution?

To manage user access permissions

To encrypt all data in the cloud

To monitor, detect, and prevent unauthorized data exfiltration

To provide backup and recovery capabilities

What is the purpose of fine-grained access control for data in the cloud?

To ensure only authorized users can access specific data resources

To encrypt all data automatically

A multinational company must store EU customer data in the EU due to data residency regulations. The company uses a cloud provider with regions worldwide. Which action is REQUIRED to comply?

Enable data loss prevention policies on the storage account

Encrypt all data with customer-managed keys stored in an EU region

Use a private cloud deployment on dedicated hardware located in the EU

Select an EU region for the storage service and configure a replication policy that only replicates within that region

A security analyst notices unusual access patterns to a sensitive database: multiple failed login attempts followed by a successful login from an unfamiliar IP address. What should the analyst do first to investigate and prevent potential data exfiltration?

Ignore the event because the login was successful and the user has legitimate access.

Change the database password and notify the user.

Disable the user account immediately and then review the audit logs.

Review the audit logs to confirm the activity, then temporarily restrict access from the unfamiliar IP.

EC-CouncilCertified Cloud Security Engineer

Domain 3Objective 1

Data Security in Cloud CCSE Practice Questions (Page 6)

Part of the Cloud Data Security and Operations domain, which makes up ~19% of our current practice bank.

53questions here

11free pages

12concepts

Questions 26–30

26foundation · easy
Which of the following is the standard protocol used to encrypt data in transit over the internet?
Select an answer first
27foundation · easy
What is the primary goal of a Data Loss Prevention (DLP) solution?
Select an answer first
28foundation · easy
What is the purpose of fine-grained access control for data in the cloud?
Select an answer first
29application · medium
A multinational company must store EU customer data in the EU due to data residency regulations. The company uses a cloud provider with regions worldwide. Which action is REQUIRED to comply?
Select an answer first
30application · medium
A security analyst notices unusual access patterns to a sensitive database: multiple failed login attempts followed by a successful login from an unfamiliar IP address. What should the analyst do first to investigate and prevent potential data exfiltration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCSE” is a trademark of its owner, used for identification only.