A cloud security team is required to demonstrate compliance with a framework that includes continuous monitoring and periodic assessment of security controls. They need a framework that provides a structured approach to selecting, implementing, and assessing controls. Which framework is most appropriate?

NIST Risk Management Framework (RMF)

A cloud security team uses the CSA CCM to structure its controls. The team wants to continuously verify that preventive controls are effective. Which approach best supports this goal?

Reviewing access logs quarterly for anomalies

Automated configuration scanning and drift detection against the CCM control definitions

Performing a one-time gap analysis against the CCM

Annual penetration testing of the cloud environment

EC-CouncilCertified Ethical Hacker

Domain 8Objective 4

Cloud Security Controls CEH Practice Questions (Page 5)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 21–25

21expert · hard
A security team is evaluating the effectiveness of their cloud security controls. They want to identify gaps that could be exploited by an attacker. They plan to use a method that involves actively attempting to exploit vulnerabilities in a controlled manner. Which method should they use?
Select an answer first
22application · medium
A cloud security team is required to demonstrate compliance with a framework that includes continuous monitoring and periodic assessment of security controls. They need a framework that provides a structured approach to selecting, implementing, and assessing controls. Which framework is most appropriate?
Select an answer first
23application · medium
A cloud security team uses the CSA CCM to structure its controls. The team wants to continuously verify that preventive controls are effective. Which approach best supports this goal?
Select an answer first
24foundation · easy
An organization wants to verify that its cloud security controls are operating as intended by reviewing them against established policies and standards. Which process is most appropriate for this purpose?
Select an answer first
25foundation · easy
A security analyst is categorizing cloud security controls for a new deployment. Which category of control is primarily intended to discourage potential attackers from attempting to violate security policies?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Cloud Security Controls CEH Practice Questions (Page 5)

Questions 21–25

A security team is evaluating the effectiveness of their cloud security controls. They want to identify gaps that could be exploited by an attacker. They plan to use a method that involves actively attempting to exploit vulnerabilities in a controlled manner. Which method should they use?

A cloud security team uses the CSA CCM to structure its controls. The team wants to continuously verify that preventive controls are effective. Which approach best supports this goal?

An organization wants to verify that its cloud security controls are operating as intended by reviewing them against established policies and standards. Which process is most appropriate for this purpose?

A security analyst is categorizing cloud security controls for a new deployment. Which category of control is primarily intended to discourage potential attackers from attempting to violate security policies?

Keep studying — Cloud Computing