A SaaS application provider wants to discourage users from sharing their login credentials. The provider also wants to detect if such sharing occurs. Which combination of controls best achieves both goals?

Require a complex password and enforce password expiration every 30 days

Display a warning banner at login and analyze login patterns for simultaneous sessions from different locations

Implement single sign-on and disable password-based login

Use a password manager and provide users with a secure vault

An organization wants to use a widely recognized framework that provides a common language and a set of activities to manage cybersecurity risk, including for cloud environments. Which framework is this?

CSA Cloud Controls Matrix (CCM)

NIST Cybersecurity Framework (CSF)

A company is using a SaaS application for customer relationship management (CRM). The security team wants to enforce multi-factor authentication (MFA) for all users. Where should this control be implemented?

Through a custom script in the application code

On the customer's on-premises firewall

Within the SaaS application's identity settings

In the underlying virtual machines

EC-CouncilCertified Ethical Hacker

Domain 8Objective 4

Cloud Security Controls CEH Practice Questions (Page 7)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 31–35

31application · medium
A cloud security team wants to verify that their detective controls are actually working. They plan to simulate a known attack pattern against a test environment to see if alerts are generated. What is this practice called?
Select an answer first
32application · medium
A SaaS application provider wants to discourage users from sharing their login credentials. The provider also wants to detect if such sharing occurs. Which combination of controls best achieves both goals?
Select an answer first
33foundation · easy
In a cloud environment, an organization deploys a security information and event management (SIEM) system that collects and analyzes logs to identify potential security incidents. Which category of cloud security control does this represent?
Select an answer first
34foundation · easy
An organization wants to use a widely recognized framework that provides a common language and a set of activities to manage cybersecurity risk, including for cloud environments. Which framework is this?
Select an answer first
35application · medium
A company is using a SaaS application for customer relationship management (CRM). The security team wants to enforce multi-factor authentication (MFA) for all users. Where should this control be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Cloud Security Controls CEH Practice Questions (Page 7)

Questions 31–35

A cloud security team wants to verify that their detective controls are actually working. They plan to simulate a known attack pattern against a test environment to see if alerts are generated. What is this practice called?

A SaaS application provider wants to discourage users from sharing their login credentials. The provider also wants to detect if such sharing occurs. Which combination of controls best achieves both goals?

In a cloud environment, an organization deploys a security information and event management (SIEM) system that collects and analyzes logs to identify potential security incidents. Which category of cloud security control does this represent?

An organization wants to use a widely recognized framework that provides a common language and a set of activities to manage cybersecurity risk, including for cloud environments. Which framework is this?

A company is using a SaaS application for customer relationship management (CRM). The security team wants to enforce multi-factor authentication (MFA) for all users. Where should this control be implemented?

Keep studying — Cloud Computing