A cloud security team has implemented a set of detective controls based on the NIST Cybersecurity Framework. Management wants to verify that these controls are effective without disrupting production operations. Which approach best meets this requirement?

Run a penetration test against the production environment during off-peak hours

Use a shadow environment to replay real traffic and validate detection rules

Disable detective controls temporarily to test the alerting pipeline

Review detection rules manually on a quarterly basis

Which method is commonly used to continuously monitor the effectiveness of cloud security controls by collecting and analyzing security-related events from cloud services?

Security information and event management (SIEM)

A cloud security team uses the NIST Cybersecurity Framework to structure its controls. Management wants to verify that the 'Detect' function's controls are actually working as intended. Which activity best fulfills this requirement?

Conducting a vulnerability scan of all cloud resources

Reviewing intrusion detection alerts and testing the alerting pipeline with simulated events

Updating the incident response playbook with new response procedures

Reviewing the asset inventory to ensure all resources are tagged

A company is deploying a PaaS application and wants to ensure that only approved code is deployed. They need a control that prevents developers from bypassing the review process. Which control should they implement?

A detective control that scans deployed code

A firewall rule blocking the deployment endpoint

An administrative policy requiring sign-off

Branch protection rules in the code repository

In which cloud service model does the customer have the most responsibility for implementing and managing security controls, including patching the operating system and configuring the network?

Infrastructure as a Service (IaaS)

EC-CouncilCertified Ethical Hacker

Domain 8Objective 4

Cloud Security Controls CEH Practice Questions (Page 8)

Part of the Cloud Computing domain, which makes up ~7% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 36–40

36expert · hard
A cloud security team has implemented a set of detective controls based on the NIST Cybersecurity Framework. Management wants to verify that these controls are effective without disrupting production operations. Which approach best meets this requirement?
Select an answer first
37foundation · easy
Which method is commonly used to continuously monitor the effectiveness of cloud security controls by collecting and analyzing security-related events from cloud services?
Select an answer first
38application · medium
A cloud security team uses the NIST Cybersecurity Framework to structure its controls. Management wants to verify that the 'Detect' function's controls are actually working as intended. Which activity best fulfills this requirement?
Select an answer first
39application · medium
A company is deploying a PaaS application and wants to ensure that only approved code is deployed. They need a control that prevents developers from bypassing the review process. Which control should they implement?
Select an answer first
40foundation · easy
In which cloud service model does the customer have the most responsibility for implementing and managing security controls, including patching the operating system and configuring the network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.