A cloud administrator is setting up a new virtual network in a public cloud. They want to ensure that only the application servers can be reached from the internet, and that database servers are not exposed. What is the best practice?

Use a single security group for all servers

Place all servers in the same subnet and rely on host firewalls

Assign public IP addresses to all servers for easy access

Use separate subnets and configure network access control lists (NACLs) and security groups

A multinational company is moving customer data to a public cloud. The legal team requires that data be protected according to GDPR, which includes restrictions on international data transfers. What is the most appropriate action?

Use a private cloud to ensure full control

Choose a cloud region within the EU and sign the provider's data processing agreement

Store all data in the company's on-premises data center

Encrypt all data with customer-managed keys

A company is using a cloud provider's IaaS offering. They have a web server that is accessible from the internet. The security team wants to protect the server from common web attacks, such as SQL injection and cross-site scripting. Which of the following is the MOST effective control?

Patching the operating system regularly

Implementing a web application firewall (WAF)

Using network security groups to restrict inbound traffic

A security administrator is configuring a cloud environment and wants to follow best practices for protecting data. Which practice is most effective for safeguarding data both in transit and at rest?

Performing regular backups without encryption

Using encryption for data in transit and at rest

Using strong passwords for all accounts

Relying solely on network firewalls

EC-CouncilCertified Network Defender

Domain 4Objective 2

Enterprise Cloud Security CND Practice Questions (Page 8)

Part of the Virtual, Cloud and Wireless Network Security domain, which makes up ~13% of our current practice bank.

43questions here

9free pages

6concepts

Questions 36–40

36application · medium
A cloud administrator is setting up a new virtual network in a public cloud. They want to ensure that only the application servers can be reached from the internet, and that database servers are not exposed. What is the best practice?
Select an answer first
37application · medium
A cloud administrator notices unusual activity from a user account that has administrative privileges. The account was used to create new access keys and modify security group rules. Which type of cloud security threat is this?
Select an answer first
38application · medium
A multinational company is moving customer data to a public cloud. The legal team requires that data be protected according to GDPR, which includes restrictions on international data transfers. What is the most appropriate action?
Select an answer first
39expert · hard
A company is using a cloud provider's IaaS offering. They have a web server that is accessible from the internet. The security team wants to protect the server from common web attacks, such as SQL injection and cross-site scripting. Which of the following is the MOST effective control?
Select an answer first
40foundation · easy
A security administrator is configuring a cloud environment and wants to follow best practices for protecting data. Which practice is most effective for safeguarding data both in transit and at rest?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.