A company's cloud environment was compromised because an attacker exploited a vulnerability in a third-party API that was integrated with the cloud service. The security team wants to reduce the risk of similar attacks. Which action is the most effective?

Ensure the API is properly authenticated and authorized

Disable the third-party API integration

Monitor API usage for unusual activity

Keep the API and its dependencies updated with security patches

A company is subject to a data residency law that requires personal data of its customers to remain within the country's borders. The company uses a cloud provider that offers regions in multiple countries. Which action is the most appropriate?

Use a private cloud hosted by the provider

Sign a data processing agreement with the provider

Store the data in a cloud region located within the country

Encrypt the data with a key stored in the country

A hospital is migrating patient records to a cloud storage service. The compliance team requires that data be encrypted at rest and that access be limited to specific medical staff. Which configuration should the cloud administrator implement?

Enable server-side encryption and assign IAM roles to the medical staff

Enable public read access and rely on the cloud provider's firewall

Use only client-side encryption and share the decryption key with all users

Store data in a private on-premises server and disable all cloud access

EC-CouncilCertified Secure Computer User

Domain 4Objective 2

Securing the Cloud CSCU Practice Questions (Page 2)

Part of the Mobile, Cloud, and Network Security domain, which makes up ~24% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

6concepts

Questions 6–10

6application · medium
A company's cloud environment was compromised because an attacker exploited a vulnerability in a third-party API that was integrated with the cloud service. The security team wants to reduce the risk of similar attacks. Which action is the most effective?
Select an answer first
7foundation · easy
A company stores sensitive customer data in a cloud database. To protect the data from being read if the database is compromised, which technique should be applied to the data at rest?
Select an answer first
8expert · hard
A company is subject to a data residency law that requires personal data of its customers to remain within the country's borders. The company uses a cloud provider that offers regions in multiple countries. Which action is the most appropriate?
Select an answer first
9application · medium
A hospital is migrating patient records to a cloud storage service. The compliance team requires that data be encrypted at rest and that access be limited to specific medical staff. Which configuration should the cloud administrator implement?
Select an answer first
10foundation · easy
A security analyst discovers that a cloud storage bucket was inadvertently left open to the public, allowing anyone on the internet to read and write files. Which type of cloud security threat does this represent?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.

Securing the Cloud CSCU Practice Questions (Page 2)

Questions 6–10

A company's cloud environment was compromised because an attacker exploited a vulnerability in a third-party API that was integrated with the cloud service. The security team wants to reduce the risk of similar attacks. Which action is the most effective?

A company stores sensitive customer data in a cloud database. To protect the data from being read if the database is compromised, which technique should be applied to the data at rest?

A company is subject to a data residency law that requires personal data of its customers to remain within the country's borders. The company uses a cloud provider that offers regions in multiple countries. Which action is the most appropriate?

A hospital is migrating patient records to a cloud storage service. The compliance team requires that data be encrypted at rest and that access be limited to specific medical staff. Which configuration should the cloud administrator implement?

A security analyst discovers that a cloud storage bucket was inadvertently left open to the public, allowing anyone on the internet to read and write files. Which type of cloud security threat does this represent?

Keep studying — Mobile, Cloud, and Network Security