A company uses a cloud-based identity and access management (IAM) service. The security team wants to ensure that users can only access resources they need and that access is reviewed regularly. Which combination of actions is the most appropriate?

Use a shared account for all users and conduct periodic access reviews

Implement RBAC and disable access reviews to save time

Use a shared account and disable access reviews for simplicity

Implement role-based access control (RBAC) and conduct periodic access reviews

A company's cloud environment was breached because an attacker used a misconfigured cloud storage bucket to access sensitive data. The security team wants to implement a solution that detects and prevents similar misconfigurations in the future. Which action is the most effective?

Implement a cloud security posture management (CSPM) tool that continuously monitors for misconfigurations

Train employees on cloud security best practices

Encrypt all data in the cloud storage bucket

Conduct a one-time security audit of the cloud environment

A company uses a cloud-based file-sharing service (SaaS) for collaboration. An employee accidentally shared a sensitive document with the public. The company wants to reduce the risk of similar incidents. Which action is the most effective?

Configure the service to block public sharing by default and require approval for external sharing

Train employees on how to use the sharing settings correctly

Audit sharing activity regularly

Use a data loss prevention (DLP) policy to detect sensitive content

A startup is deploying a web application on a cloud VM. The security team wants to ensure that only the application's load balancer can reach the VM's HTTP port, while the administrator needs SSH access from a specific office IP. Which network configuration should be applied?

Open port 80 to the internet and block port 22 entirely

Disable the firewall and rely on the VM's operating system security

Allow all inbound traffic on ports 80 and 22

Restrict port 80 to the load balancer's IP and port 22 to the office IP

A company is evaluating cloud deployment models for a new application that handles sensitive financial data. The company has a regulatory requirement to maintain exclusive control over the hardware that stores the data. Which cloud model is the most appropriate?

Public cloud with a dedicated hosting option

Private cloud hosted on-premises

Hybrid cloud with data stored in the public cloud

Community cloud shared with other financial institutions

EC-CouncilCertified Secure Computer User

Domain 4Objective 2

Securing the Cloud CSCU Practice Questions (Page 4)

Part of the Mobile, Cloud, and Network Security domain, which makes up ~24% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

6concepts

Questions 16–20

16expert · hard
A company uses a cloud-based identity and access management (IAM) service. The security team wants to ensure that users can only access resources they need and that access is reviewed regularly. Which combination of actions is the most appropriate?
Select an answer first
17expert · hard
A company's cloud environment was breached because an attacker used a misconfigured cloud storage bucket to access sensitive data. The security team wants to implement a solution that detects and prevents similar misconfigurations in the future. Which action is the most effective?
Select an answer first
18application · medium
A company uses a cloud-based file-sharing service (SaaS) for collaboration. An employee accidentally shared a sensitive document with the public. The company wants to reduce the risk of similar incidents. Which action is the most effective?
Select an answer first
19application · medium
A startup is deploying a web application on a cloud VM. The security team wants to ensure that only the application's load balancer can reach the VM's HTTP port, while the administrator needs SSH access from a specific office IP. Which network configuration should be applied?
Select an answer first
20expert · hard
A company is evaluating cloud deployment models for a new application that handles sensitive financial data. The company has a regulatory requirement to maintain exclusive control over the hardware that stores the data. Which cloud model is the most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.