A company uses an IaaS environment and wants to implement a control that discourages employees from attempting to access restricted administrative portals. Which control is most appropriate?

Implement multi-factor authentication for administrative accounts

Enable detailed audit logging of all administrative actions

Restrict administrative portal access to specific IP addresses

Display a legal warning banner on the administrative login page

A company is migrating a legacy application to the cloud and must comply with a regulation that requires physical access logs to the servers hosting the application. The company chooses an IaaS deployment. Which party is responsible for providing these logs?

Both parties jointly, because they share physical access

The customer, because they are responsible for the application

A third-party auditor, because they verify compliance

The cloud provider, because they control the physical data center

A hospital uses a private cloud to host patient records. The compliance team requires that only authorized personnel can physically access the servers and that all access to patient data is logged. Which control pairing meets both requirements?

Security guards and a visitor sign-in sheet

Biometric access control to the data center and database audit logging

Role-based access control and encryption of data at rest

Data classification policy and employee background checks

A security architect is selecting a framework to guide the implementation of cloud security controls. The organization needs a framework that provides a comprehensive set of cloud-specific control objectives and a companion set of assessment procedures. Which framework best fits this need?

CSA Cloud Controls Matrix (CCM)

EC-CouncilCertified Ethical Hacker

Domain 8Objective 4

Cloud Security Controls CEH Practice Questions (Page 2)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 6–10

6application · medium
A security analyst is reviewing cloud security controls and wants to identify which controls are designed to discourage potential attackers by making the target less appealing. Which category of controls serves this purpose?
Select an answer first
7application · medium
A company uses an IaaS environment and wants to implement a control that discourages employees from attempting to access restricted administrative portals. Which control is most appropriate?
Select an answer first
8expert · hard
A company is migrating a legacy application to the cloud and must comply with a regulation that requires physical access logs to the servers hosting the application. The company chooses an IaaS deployment. Which party is responsible for providing these logs?
Select an answer first
9application · medium
A hospital uses a private cloud to host patient records. The compliance team requires that only authorized personnel can physically access the servers and that all access to patient data is logged. Which control pairing meets both requirements?
Select an answer first
10application · medium
A security architect is selecting a framework to guide the implementation of cloud security controls. The organization needs a framework that provides a comprehensive set of cloud-specific control objectives and a companion set of assessment procedures. Which framework best fits this need?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.