A security analyst notices that a cloud storage bucket is publicly readable and contains sensitive files. Which control should be implemented to prevent this from recurring?

Configure bucket policies to deny public access

Enable versioning on the bucket

Encrypt the bucket with server-side encryption

A network defender is evaluating cloud service models to determine which one provides the customer with the greatest level of control over the underlying infrastructure. Which cloud service model gives the customer the most control over the operating system, runtime, and application while still being hosted in the provider's data center?

Infrastructure as a Service (IaaS)

A company is migrating its on-premises customer relationship management (CRM) application to an IaaS cloud provider. The application runs on a Linux VM and stores customer data in a managed database service. The security team is responsible for patching the operating system and configuring the firewall on the VM. Which of the following tasks is MOST likely the responsibility of the cloud provider in this IaaS model?

Installing and updating the CRM application software

Managing the underlying physical servers and hypervisor

Patching the guest operating system of the VM

Configuring the VM's network security group rules

A company is moving its web application to a cloud environment. The security team wants to implement a best practice to protect against credential stuffing attacks. Which of the following controls is MOST effective?

Using a web application firewall (WAF)

Restricting access to the application by IP address

Implementing multi-factor authentication (MFA)

Encrypting the database containing user credentials

A financial services company is evaluating a cloud provider for hosting customer transaction data. The company is subject to PCI DSS. Which of the following is a key compliance consideration?

Encrypting all data at rest and in transit

Using a private cloud to avoid PCI DSS

Signing a business associate agreement (BAA)

Ensuring the provider is PCI DSS compliant

EC-CouncilCertified Network Defender

Domain 4Objective 2

Enterprise Cloud Security CND Practice Questions (Page 7)

Part of the Virtual, Cloud and Wireless Network Security domain, which makes up ~13% of our current practice bank.

43questions here

9free pages

6concepts

Questions 31–35

31application · medium
A security analyst notices that a cloud storage bucket is publicly readable and contains sensitive files. Which control should be implemented to prevent this from recurring?
Select an answer first
32foundation · easy
A network defender is evaluating cloud service models to determine which one provides the customer with the greatest level of control over the underlying infrastructure. Which cloud service model gives the customer the most control over the operating system, runtime, and application while still being hosted in the provider's data center?
Select an answer first
33application · medium
A company is migrating its on-premises customer relationship management (CRM) application to an IaaS cloud provider. The application runs on a Linux VM and stores customer data in a managed database service. The security team is responsible for patching the operating system and configuring the firewall on the VM. Which of the following tasks is MOST likely the responsibility of the cloud provider in this IaaS model?
Select an answer first
34application · medium
A company is moving its web application to a cloud environment. The security team wants to implement a best practice to protect against credential stuffing attacks. Which of the following controls is MOST effective?
Select an answer first
35application · medium
A financial services company is evaluating a cloud provider for hosting customer transaction data. The company is subject to PCI DSS. Which of the following is a key compliance consideration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Enterprise Cloud Security CND Practice Questions (Page 7)

Questions 31–35

A security analyst notices that a cloud storage bucket is publicly readable and contains sensitive files. Which control should be implemented to prevent this from recurring?

A company is moving its web application to a cloud environment. The security team wants to implement a best practice to protect against credential stuffing attacks. Which of the following controls is MOST effective?

A financial services company is evaluating a cloud provider for hosting customer transaction data. The company is subject to PCI DSS. Which of the following is a key compliance consideration?

Keep studying — Virtual, Cloud and Wireless Network Security