Cloud Computing Threats CEH Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A hospital is planning its cloud strategy. It must keep electronic health records (EHR) on-premises due to strict data residency regulations, but it wants to run analytics workloads in the public cloud. Which deployment model best meets these requirements?

   • APrivate cloud only, hosted at the hospital's data center.
   • BHybrid cloud, keeping EHR on-premises and using public cloud for analytics.
   • CCommunity cloud shared with other hospitals.
   • DPublic cloud only, with all data stored in the cloud provider's region.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company uses a cloud-based service that stores sensitive data. They have implemented encryption, access controls, and monitoring. However, they are concerned about the risk of a malicious insider at the cloud provider. Which control is most effective?

   • AUse client-side encryption with customer-managed keys
   • BImplement strong network segmentation
   • CRely on the provider's background checks
   • DUse server-side encryption with provider-managed keys
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company uses a cloud provider that fails to meet industry-specific compliance requirements. The company's security team is asked to address this. Which action is most appropriate?

   • AEncrypt all data to automatically achieve compliance.
   • BRely on the provider's compliance certifications as sufficient evidence.
   • CIgnore the compliance failure because the provider is responsible for security.
   • DMove to a provider that can meet the compliance requirements or implement compensating controls.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which threat from a cloud service provider involves the provider failing to meet regulatory or industry standards, potentially exposing the customer to legal penalties?

   • AService outage
   • BVendor lock-in
   • CCompliance failure
   • DAccount hijacking
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A cloud service provider (CSP) suffers a major outage that affects multiple customers. One customer's disaster recovery plan relies on the same CSP's secondary region. What is the primary risk this customer faces?

   • AVendor lock-in, because the customer cannot easily switch providers.
   • BData breach, because the outage may expose data.
   • CCompliance failure, because the outage prevents audits.
   • DService outage, because the secondary region may also be affected or the failover may not be independent.
   Reveal Solution Discussion Select an answer first