A company uses a PaaS platform to run a containerized application. The security team must implement a control that prevents unauthorized changes to the application's configuration and also detects any unauthorized changes that occur. Which control combination is most appropriate in this PaaS environment?

Deploy a host-based intrusion detection system on the container host

Implement a network security group to restrict access to the application

Enable platform-level configuration policies and use the platform's change audit log

Use a configuration management tool to manually apply changes

A security analyst is reviewing the security controls for a cloud environment. The analyst wants to implement controls that will both detect and correct misconfigurations. Select all that apply.

A log review process that identifies anomalies

A firewall rule that blocks all inbound traffic

Automated configuration scanning that alerts on drift

A warning banner on the login page

A remediation script that automatically reverts unauthorized changes

A company subscribes to a cloud-based email and collaboration suite. The provider is responsible for patching the application and underlying infrastructure. Which cloud service model does this represent?

Infrastructure as a Service (IaaS)

A security team is planning to assess the effectiveness of their cloud security controls. They want to use a combination of methods that provide both automated and manual insights. Select all that apply.

A single annual risk assessment

Automated vulnerability scanning

A cloud customer creates a policy that requires all employees to complete annual security awareness training and to use multi-factor authentication (MFA) for accessing cloud resources. Which types of controls are described in this policy?

Technical and physical controls

Physical and administrative controls

Administrative and technical controls

Administrative and detective controls

EC-CouncilCertified Ethical Hacker

Domain 8Objective 4

Cloud Security Controls CEH Practice Questions (Page 1)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 1–5

1expert · hard
A company uses a PaaS platform to run a containerized application. The security team must implement a control that prevents unauthorized changes to the application's configuration and also detects any unauthorized changes that occur. Which control combination is most appropriate in this PaaS environment?
Select an answer first
2expert · hard · select all that apply
A security analyst is reviewing the security controls for a cloud environment. The analyst wants to implement controls that will both detect and correct misconfigurations. Select all that apply.
Select an answer first
3foundation · easy
A company subscribes to a cloud-based email and collaboration suite. The provider is responsible for patching the application and underlying infrastructure. Which cloud service model does this represent?
Select an answer first
4expert · hard · select all that apply
A security team is planning to assess the effectiveness of their cloud security controls. They want to use a combination of methods that provide both automated and manual insights. Select all that apply.
Select an answer first
5foundation · easy
A cloud customer creates a policy that requires all employees to complete annual security awareness training and to use multi-factor authentication (MFA) for accessing cloud resources. Which types of controls are described in this policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.