A company is evaluating a move to a single cloud provider. The CFO is concerned about the risk of being locked into proprietary APIs and services. Which mitigation strategy is most appropriate?

Sign a multi-year contract with the provider to ensure stable pricing.

Store all data in a proprietary format to maximize performance.

Use only the provider's native managed services for all functionality.

Design the application using open standards and containerization to maintain portability.

A cloud administrator notices unusual activity in the audit logs: a user account is creating new IAM roles and attaching them to instances. The account belongs to a developer who normally only deploys code. Which type of threat is this most likely?

Insecure API, because the IAM API is vulnerable.

Service outage, because the IAM service is failing.

Misconfigured storage, because the logs are not properly secured.

Insider threat, because the developer is abusing elevated privileges.

A small business is considering moving its customer database to a public cloud. The owner is concerned about the risk of data breaches due to multi-tenancy. Which mitigation is most effective?

Avoid cloud computing entirely and keep data on-premises.

Encrypt the database and implement strong access controls.

Use a private cloud to ensure dedicated hardware.

Select a cloud provider that offers a shared responsibility model.

A company operates a multi-tenant SaaS platform. They are concerned about the risk of a tenant using a vulnerability to access another tenant's data. They are evaluating controls to mitigate this risk. Which control is most effective?

Implement strong tenant isolation at the application and network layers

Deploy a WAF in front of the application

Use a single shared database for all tenants

EC-CouncilCertified Ethical Hacker

Domain 8Objective 2

Cloud Computing Threats CEH Practice Questions (Page 2)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 6–10

6application · medium
A company is evaluating a move to a single cloud provider. The CFO is concerned about the risk of being locked into proprietary APIs and services. Which mitigation strategy is most appropriate?
Select an answer first
7expert · hard
A cloud administrator notices unusual activity in the audit logs: a user account is creating new IAM roles and attaching them to instances. The account belongs to a developer who normally only deploys code. Which type of threat is this most likely?
Select an answer first
8application · medium
A small business is considering moving its customer database to a public cloud. The owner is concerned about the risk of data breaches due to multi-tenancy. Which mitigation is most effective?
Select an answer first
9expert · hard
A company operates a multi-tenant SaaS platform. They are concerned about the risk of a tenant using a vulnerability to access another tenant's data. They are evaluating controls to mitigate this risk. Which control is most effective?
Select an answer first
10foundation · easy
Which cloud attack vector involves an attacker using stolen credentials to gain unauthorized access to a cloud account and its resources?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.