A company migrates a legacy customer database to an IaaS virtual machine. The security team is required to implement a control that prevents unauthorized operating system access and also provides a record of who attempted to log in. Which combination of controls should the team implement?

Implement a data loss prevention policy that blocks sensitive data from leaving the VM

Deploy a host-based intrusion detection system that alerts on failed logins

Apply a network security group that allows only the security team's IP addresses

Enable OS-level multi-factor authentication and configure audit logging for login events

A cloud security architect is selecting a framework to guide the implementation of security controls across a multi-cloud environment. Which framework is specifically developed by the Cloud Security Alliance (CSA) and provides a comprehensive set of cloud-specific security controls?

NIST Cybersecurity Framework (CSF)

A startup uses a PaaS offering to deploy a web application. The security team wants to implement a control that prevents SQL injection attacks at the application layer. Which control is most appropriate in this PaaS environment?

Deploy a host-based intrusion detection system on the application server

Patch the underlying operating system of the application server

Implement a network security group to restrict inbound traffic

Configure the platform's Web Application Firewall (WAF) to filter malicious requests

A healthcare organization uses a private cloud to store electronic health records. The organization must implement a control that prevents unauthorized employees from accessing patient data and also provides a record of all access for compliance audits. Which control combination best meets these requirements?

Conduct regular security awareness training and background checks

Deploy a network intrusion detection system (NIDS) and a firewall

Implement role-based access control (RBAC) and enable database audit logging

Use data encryption and implement a data loss prevention (DLP) policy

EC-CouncilCertified Ethical Hacker

Domain 8Objective 4

Cloud Security Controls CEH Practice Questions (Page 4)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 16–20

16application · medium
A company migrates a legacy customer database to an IaaS virtual machine. The security team is required to implement a control that prevents unauthorized operating system access and also provides a record of who attempted to log in. Which combination of controls should the team implement?
Select an answer first
17foundation · easy
A cloud security architect is selecting a framework to guide the implementation of security controls across a multi-cloud environment. Which framework is specifically developed by the Cloud Security Alliance (CSA) and provides a comprehensive set of cloud-specific security controls?
Select an answer first
18foundation · easy
A cloud service provider implements security guards, biometric access controls, and surveillance cameras at its data center. Which type of cloud security control does this represent?
Select an answer first
19application · medium
A startup uses a PaaS offering to deploy a web application. The security team wants to implement a control that prevents SQL injection attacks at the application layer. Which control is most appropriate in this PaaS environment?
Select an answer first
20expert · hard
A healthcare organization uses a private cloud to store electronic health records. The organization must implement a control that prevents unauthorized employees from accessing patient data and also provides a record of all access for compliance audits. Which control combination best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Cloud Security Controls CEH Practice Questions (Page 4)

Questions 16–20

A company migrates a legacy customer database to an IaaS virtual machine. The security team is required to implement a control that prevents unauthorized operating system access and also provides a record of who attempted to log in. Which combination of controls should the team implement?

A cloud security architect is selecting a framework to guide the implementation of security controls across a multi-cloud environment. Which framework is specifically developed by the Cloud Security Alliance (CSA) and provides a comprehensive set of cloud-specific security controls?

A cloud service provider implements security guards, biometric access controls, and surveillance cameras at its data center. Which type of cloud security control does this represent?

A startup uses a PaaS offering to deploy a web application. The security team wants to implement a control that prevents SQL injection attacks at the application layer. Which control is most appropriate in this PaaS environment?

Keep studying — Cloud Computing