A company is migrating its customer-facing web application to an IaaS cloud provider. The security team is defining the shared responsibility model. Which security task is the customer responsible for, even when using a managed database service?

Ensuring the database is backed up automatically

Securing the physical data center where the database runs

Configuring network access controls to the database

Patching the database engine software

A company is deploying a web application in the cloud and wants to protect it from common web attacks like SQL injection and cross-site scripting. Which cloud security control should be implemented?

Distributed denial-of-service (DDoS) protection

Network access control list (NACL)

Virtual private network (VPN) gateway

An organization is adopting a cloud-based identity provider to manage access to multiple SaaS applications. Which capability is essential for enforcing least-privilege access?

Multi-factor authentication (MFA)

Role-based access control (RBAC)

A company is evaluating cloud service models for a new application. They need to minimize management overhead and want to focus on developing the application code. They also need the ability to scale automatically based on demand. Which cloud service model is BEST suited?

Infrastructure as a Service (IaaS)

EC-CouncilCertified Network Defender

Domain 4Objective 2

Enterprise Cloud Security CND Practice Questions (Page 2)

Part of the Virtual, Cloud and Wireless Network Security domain, which makes up ~13% of our current practice bank.

43questions here

9free pages

6concepts

Questions 6–10

6foundation · easy
Which legal consideration is most relevant when a cloud customer stores data in a cloud provider's data center located in a different country?
Select an answer first
7application · medium
A company is migrating its customer-facing web application to an IaaS cloud provider. The security team is defining the shared responsibility model. Which security task is the customer responsible for, even when using a managed database service?
Select an answer first
8application · medium
A company is deploying a web application in the cloud and wants to protect it from common web attacks like SQL injection and cross-site scripting. Which cloud security control should be implemented?
Select an answer first
9application · medium
An organization is adopting a cloud-based identity provider to manage access to multiple SaaS applications. Which capability is essential for enforcing least-privilege access?
Select an answer first
10expert · hard
A company is evaluating cloud service models for a new application. They need to minimize management overhead and want to focus on developing the application code. They also need the ability to scale automatically based on demand. Which cloud service model is BEST suited?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.