A cloud administrator wants to control inbound and outbound traffic to a virtual network in the cloud. Which network setting should be configured?

Virtual private network (VPN) gateway

Network security group (NSG) or firewall rules

A developer accidentally exposed an API key in a public code repository. The key grants access to a cloud storage service. What is the immediate action the developer should take?

Revoke the exposed API key and generate a new one

Change the permissions on the storage service to read-only

Encrypt the storage service data

A company is deploying a multi-tier application in the cloud. The web tier must be accessible from the internet, but the database tier must not be directly accessible from the internet. The security team wants to ensure that only the web tier can communicate with the database tier. Which network architecture should be implemented?

Place the web tier in a public subnet and the database tier in a private subnet, with security groups allowing only the web tier to access the database

Place the database tier in a public subnet and the web tier in a private subnet

Place both tiers in the same public subnet and rely on security groups

Use a single subnet for both tiers and open all ports

A company is using an IaaS cloud environment to host a web server. The security team wants to ensure that only HTTP and HTTPS traffic from the internet reaches the server. Which configuration is the most appropriate?

Configure a network security group (NSG) to allow inbound traffic on ports 80 and 443 only

Use a VPN gateway to connect to the virtual machine

Enable encryption on the virtual machine's disk

Assign a public IP address to the virtual machine

A company's cloud application was compromised because an attacker exploited a vulnerability in a third-party API that the application used to process payments. Which security measure would have been most effective in preventing this type of attack?

Regularly updating and patching the third-party API and its dependencies

Encrypting all data stored in the cloud database

Using a complex password for the cloud administrator account

Backing up the application data daily

EC-CouncilCertified Secure Computer User

Domain 4Objective 2

Securing the Cloud CSCU Practice Questions (Page 5)

Part of the Mobile, Cloud, and Network Security domain, which makes up ~24% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

6concepts

Questions 21–25

21foundation · easy
A cloud administrator wants to control inbound and outbound traffic to a virtual network in the cloud. Which network setting should be configured?
Select an answer first
22application · medium
A developer accidentally exposed an API key in a public code repository. The key grants access to a cloud storage service. What is the immediate action the developer should take?
Select an answer first
23expert · hard
A company is deploying a multi-tier application in the cloud. The web tier must be accessible from the internet, but the database tier must not be directly accessible from the internet. The security team wants to ensure that only the web tier can communicate with the database tier. Which network architecture should be implemented?
Select an answer first
24application · medium
A company is using an IaaS cloud environment to host a web server. The security team wants to ensure that only HTTP and HTTPS traffic from the internet reaches the server. Which configuration is the most appropriate?
Select an answer first
25application · medium
A company's cloud application was compromised because an attacker exploited a vulnerability in a third-party API that the application used to process payments. Which security measure would have been most effective in preventing this type of attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.