A healthcare organization must keep patient data within its own country due to data residency regulations, but wants to use cloud resources for development and testing. Which deployment model best meets this requirement?

Community cloud shared with other healthcare organizations

Hybrid cloud with the public portion in a neighboring country

Public cloud with a region located in the required country

Private cloud hosted on-premises

A company is using a SaaS application for HR management. They need to ensure that employee data is encrypted at rest and that they have the ability to audit access to the data. Which of the following is the MOST appropriate approach?

Using a customer-managed key (CMK) and enabling audit logging

Relying on the SaaS provider's default encryption and logging

Encrypting the data before uploading it to the SaaS application

Moving to an IaaS model to have full control

A company is deploying a new application in the cloud. The security team wants to follow best practices for securing the environment. Which of the following is a recommended best practice?

Disabling security groups to improve performance

Enabling detailed logging and monitoring

Using the same credentials for all cloud accounts

Storing encryption keys in the same location as the data

EC-CouncilCertified Network Defender

Domain 4Objective 2

Enterprise Cloud Security CND Practice Questions (Page 5)

Part of the Virtual, Cloud and Wireless Network Security domain, which makes up ~13% of our current practice bank.

43questions here

9free pages

6concepts

Questions 21–25

21foundation · easy
A cloud administrator wants to protect sensitive data stored in a cloud object storage bucket from being read by unauthorized parties. Which security control is most directly applicable?
Select an answer first
22expert · hard
A security analyst is investigating a potential data breach in a cloud environment. The analyst discovers that a user with read-only permissions was able to modify a storage bucket's access policy. This is an example of which type of cloud security issue?
Select an answer first
23application · medium
A healthcare organization must keep patient data within its own country due to data residency regulations, but wants to use cloud resources for development and testing. Which deployment model best meets this requirement?
Select an answer first
24expert · hard
A company is using a SaaS application for HR management. They need to ensure that employee data is encrypted at rest and that they have the ability to audit access to the data. Which of the following is the MOST appropriate approach?
Select an answer first
25application · medium
A company is deploying a new application in the cloud. The security team wants to follow best practices for securing the environment. Which of the following is a recommended best practice?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Enterprise Cloud Security CND Practice Questions (Page 5)

Questions 21–25

A cloud administrator wants to protect sensitive data stored in a cloud object storage bucket from being read by unauthorized parties. Which security control is most directly applicable?

A security analyst is investigating a potential data breach in a cloud environment. The analyst discovers that a user with read-only permissions was able to modify a storage bucket's access policy. This is an example of which type of cloud security issue?

A healthcare organization must keep patient data within its own country due to data residency regulations, but wants to use cloud resources for development and testing. Which deployment model best meets this requirement?

A company is using a SaaS application for HR management. They need to ensure that employee data is encrypted at rest and that they have the ability to audit access to the data. Which of the following is the MOST appropriate approach?

A company is deploying a new application in the cloud. The security team wants to follow best practices for securing the environment. Which of the following is a recommended best practice?

Keep studying — Virtual, Cloud and Wireless Network Security