Which cloud-specific threat is characterized by the permanent deletion or corruption of data, often due to inadequate backup or accidental deletion?

Insufficient identity management

A company operates a hybrid cloud where sensitive data is stored on-premises and less sensitive data is in the public cloud. The security team wants to ensure that a compromised public cloud workload cannot access on-premises data. Which control is most appropriate?

Implement strict network segmentation and firewall rules to limit traffic from the cloud to only necessary ports.

Move all data to the public cloud to simplify security.

Use a VPN connection between the cloud and on-premises network.

Encrypt all data in transit between the cloud and on-premises.

A company uses a cloud-based file sharing service. An employee with legitimate access to sensitive files leaves the company, but their account is not deprovisioned for several weeks. Which threat does this situation exemplify?

Insufficient identity management

Data breach due to external attacker

A company is using a cloud provider that has a history of service outages. The company's application is mission-critical and cannot tolerate downtime. Which approach is most effective to mitigate this risk?

Move to a private cloud to avoid provider outages.

Negotiate a service-level agreement (SLA) with financial penalties.

Design the application to be multi-cloud or multi-region with failover.

Purchase a premium support plan from the provider.

A company uses a cloud provider's API to manage resources. They have implemented API keys and IP whitelisting. However, an attacker has obtained a valid API key. Which control would best limit the damage?

Add more IP addresses to the whitelist

Disable the API and use the console only

Implement short-lived tokens and rotate keys regularly

EC-CouncilCertified Ethical Hacker

Domain 8Objective 2

Cloud Computing Threats CEH Practice Questions (Page 7)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 31–35

31foundation · easy
Which cloud-specific threat is characterized by the permanent deletion or corruption of data, often due to inadequate backup or accidental deletion?
Select an answer first
32application · medium
A company operates a hybrid cloud where sensitive data is stored on-premises and less sensitive data is in the public cloud. The security team wants to ensure that a compromised public cloud workload cannot access on-premises data. Which control is most appropriate?
Select an answer first
33application · medium
A company uses a cloud-based file sharing service. An employee with legitimate access to sensitive files leaves the company, but their account is not deprovisioned for several weeks. Which threat does this situation exemplify?
Select an answer first
34application · medium
A company is using a cloud provider that has a history of service outages. The company's application is mission-critical and cannot tolerate downtime. Which approach is most effective to mitigate this risk?
Select an answer first
35expert · hard
A company uses a cloud provider's API to manage resources. They have implemented API keys and IP whitelisting. However, an attacker has obtained a valid API key. Which control would best limit the damage?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.