A company is storing sensitive customer data in a cloud object storage service. They want to ensure that even if the storage is compromised, the data remains unreadable. Which control should they implement?

Encrypt the data with customer-managed keys

Use a private network for storage access

A security team is reviewing cloud security threats and notices that an attacker used stolen credentials to access a cloud management console. Which additional control would most effectively reduce the risk of this attack?

Disable console access and use API only

Enable multi-factor authentication (MFA) for all users

Increase password complexity requirements

EC-CouncilCertified Network Defender

Domain 4Objective 2

Enterprise Cloud Security CND Practice Questions (Page 4)

Part of the Virtual, Cloud and Wireless Network Security domain, which makes up ~13% of our current practice bank.

43questions here

9free pages

6concepts

Questions 16–20

16foundation · easy
A cloud customer is concerned about an attacker using stolen credentials to access their cloud management console. Which of the following cloud security threats does this scenario describe?
Select an answer first
17application · medium
A company is storing sensitive customer data in a cloud object storage service. They want to ensure that even if the storage is compromised, the data remains unreadable. Which control should they implement?
Select an answer first
18application · medium
A security team is reviewing cloud security threats and notices that an attacker used stolen credentials to access a cloud management console. Which additional control would most effectively reduce the risk of this attack?
Select an answer first
19application · medium
A company operating in a regulated industry must demonstrate compliance with a framework that requires audit logs of all access to sensitive data. Which cloud feature should they enable?
Select an answer first
20application · medium
A government agency must share a cloud environment with several other agencies that have similar security requirements. They want to reduce costs by sharing infrastructure, but they need to ensure that data is isolated from agencies outside their group. Which deployment model is MOST appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Enterprise Cloud Security CND Practice Questions (Page 4)

Questions 16–20

A cloud customer is concerned about an attacker using stolen credentials to access their cloud management console. Which of the following cloud security threats does this scenario describe?

A company is storing sensitive customer data in a cloud object storage service. They want to ensure that even if the storage is compromised, the data remains unreadable. Which control should they implement?

A security team is reviewing cloud security threats and notices that an attacker used stolen credentials to access a cloud management console. Which additional control would most effectively reduce the risk of this attack?

A company operating in a regulated industry must demonstrate compliance with a framework that requires audit logs of all access to sensitive data. Which cloud feature should they enable?

A government agency must share a cloud environment with several other agencies that have similar security requirements. They want to reduce costs by sharing infrastructure, but they need to ensure that data is isolated from agencies outside their group. Which deployment model is MOST appropriate?

Keep studying — Virtual, Cloud and Wireless Network Security