A cloud security team wants to ensure that its detective controls are effective. The team has implemented a SIEM that collects logs from cloud resources. Which activity best validates the effectiveness of the detective controls?

Reviewing the SIEM's storage capacity

Injecting test events into the SIEM and verifying that alerts are generated

Configuring the SIEM to send alerts to the security team's email

Updating the SIEM's software to the latest version

A company migrating to Azure IaaS wants to ensure that only authorized administrators can access the virtual machines' management ports. They require a solution that enforces access rules at the network layer, independent of the guest OS. Which control should they implement?

Guest OS firewall configuration

Network security group (NSG) with inbound rules

A security architect is designing a cloud environment and wants to implement a control that will stop an ongoing brute-force attack on a web application. The control must act immediately and automatically. Which type of control should be implemented?

A corrective control that resets passwords

A detective control that alerts on failed logins

A web application firewall (WAF) with rate limiting

A deterrent control that displays a warning

A financial institution uses a SaaS CRM. The compliance team requires that access to customer data be restricted based on job role and that any unauthorized access attempts be logged. Which controls should the institution implement?

Implement a data loss prevention (DLP) policy that blocks data export

Perform regular backups of the CRM data

Use a VPN to connect to the SaaS provider

Configure role-based access control (RBAC) and enable audit logging in the SaaS application

A company is using a PaaS service to run a containerized application. They need to ensure that the container images are scanned for vulnerabilities before deployment. Which control should they implement?

A detective control that scans running containers

A corrective control that patches images after deployment

An administrative policy requiring developers to scan images manually

A policy in the CI/CD pipeline that blocks deployment if the image scan fails

EC-CouncilCertified Ethical Hacker

Domain 8Objective 4

Cloud Security Controls CEH Practice Questions (Page 3)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 11–15

11application · medium
A cloud security team wants to ensure that its detective controls are effective. The team has implemented a SIEM that collects logs from cloud resources. Which activity best validates the effectiveness of the detective controls?
Select an answer first
12application · medium
A company migrating to Azure IaaS wants to ensure that only authorized administrators can access the virtual machines' management ports. They require a solution that enforces access rules at the network layer, independent of the guest OS. Which control should they implement?
Select an answer first
13expert · hard
A security architect is designing a cloud environment and wants to implement a control that will stop an ongoing brute-force attack on a web application. The control must act immediately and automatically. Which type of control should be implemented?
Select an answer first
14application · medium
A financial institution uses a SaaS CRM. The compliance team requires that access to customer data be restricted based on job role and that any unauthorized access attempts be logged. Which controls should the institution implement?
Select an answer first
15expert · hard
A company is using a PaaS service to run a containerized application. They need to ensure that the container images are scanned for vulnerabilities before deployment. Which control should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.