A company uses a single cloud provider for all its infrastructure. They are concerned about the risk of a provider outage affecting all their services. They want to improve resilience without incurring the cost of a full multi-cloud strategy. Which approach is most appropriate?

Use multiple availability zones within the same provider

Move all workloads to a different provider

Use a single region with multiple instances

A company is migrating to a public cloud and wants to ensure that its security team can detect and respond to threats in real time. The team is small and cannot monitor 24/7. Which approach is most effective?

Rely on the cloud provider's security monitoring services.

Disable logging to reduce noise.

Hire additional security staff to monitor logs manually.

Implement automated alerting and integrate with a security information and event management (SIEM) system.

A company's cloud account is compromised because an employee reused a password that appeared in a data breach. The attacker used the account to launch additional attacks. Which combination of controls would best prevent this?

Increase the password length to 20 characters.

Use a VPN for all administrative access.

Enforce MFA and use a password manager to generate unique passwords.

Disable the account after three failed login attempts.

EC-CouncilCertified Ethical Hacker

Domain 8Objective 2

Cloud Computing Threats CEH Practice Questions (Page 1)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 1–5

1expert · hard
A company uses a single cloud provider for all its infrastructure. They are concerned about the risk of a provider outage affecting all their services. They want to improve resilience without incurring the cost of a full multi-cloud strategy. Which approach is most appropriate?
Select an answer first
2foundation · easy
Which mitigation strategy is most directly effective in protecting data stored in the cloud from unauthorized access if the storage is misconfigured?
Select an answer first
3expert · hard
A company is migrating to a public cloud and wants to ensure that its security team can detect and respond to threats in real time. The team is small and cannot monitor 24/7. Which approach is most effective?
Select an answer first
4foundation · easy
In which cloud deployment model is the organization typically most responsible for securing the underlying infrastructure, including the physical hardware?
Select an answer first
5application · medium
A company's cloud account is compromised because an employee reused a password that appeared in a data breach. The attacker used the account to launch additional attacks. Which combination of controls would best prevent this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Cloud Computing Threats CEH Practice Questions (Page 1)

Questions 1–5

A company uses a single cloud provider for all its infrastructure. They are concerned about the risk of a provider outage affecting all their services. They want to improve resilience without incurring the cost of a full multi-cloud strategy. Which approach is most appropriate?

Which mitigation strategy is most directly effective in protecting data stored in the cloud from unauthorized access if the storage is misconfigured?

A company is migrating to a public cloud and wants to ensure that its security team can detect and respond to threats in real time. The team is small and cannot monitor 24/7. Which approach is most effective?

In which cloud deployment model is the organization typically most responsible for securing the underlying infrastructure, including the physical hardware?

A company's cloud account is compromised because an employee reused a password that appeared in a data breach. The attacker used the account to launch additional attacks. Which combination of controls would best prevent this?

Keep studying — Cloud Computing