A company uses a cloud storage service to store customer data. The company has a compliance requirement to encrypt data with keys that the company manages and that are not accessible to the cloud provider. Which encryption approach should the company use?

Server-side encryption with provider-managed keys

Server-side encryption with customer-managed keys

Client-side encryption with customer-managed keys

Encryption in transit using TLS

A small business uses a cloud-based email and document suite (SaaS) for all employees. The IT manager wants to ensure that company data is protected if an employee's device is lost or stolen. Which action is the most effective for the IT manager to take?

Implement a policy that requires employees to use strong passwords and change them monthly

Configure remote wipe and device management policies for company-owned devices

Use client-side encryption for all documents before uploading them to the cloud

Enable multi-factor authentication for all user accounts

A multinational company must store European customer data in a specific EU country to comply with data residency regulations. The company also wants to use a cloud provider for analytics. Which cloud deployment consideration is most important?

Using a public cloud provider that offers the lowest cost

Ensuring the cloud provider uses only renewable energy

Selecting a cloud region located in the required EU country

Choosing a cloud provider that offers the most storage capacity

A company uses a cloud-based file sharing service to collaborate with external partners. The security team wants to ensure that partners can only access specific folders and that their access can be revoked quickly. Which access control approach should be used?

Grant each partner a separate account with permissions to only the required folders

Create a shared account for all partners with access to all folders

Send files as email attachments instead of using the cloud service

Share the folders publicly and rely on the partners' own security

A company's cloud storage bucket was accidentally made public, exposing customer data. The security team wants to prevent this from happening again. Which combination of actions is the most effective?

Enable logging and monitoring on the storage bucket

Encrypt all data in the bucket with server-side encryption

Create a backup of the bucket in another region

Use a private bucket by default and require explicit permission for public access

EC-CouncilCertified Secure Computer User

Domain 4Objective 2

Securing the Cloud CSCU Practice Questions (Page 6)

Part of the Mobile, Cloud, and Network Security domain, which makes up ~24% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

6concepts

Questions 26–30

26expert · hard
A company uses a cloud storage service to store customer data. The company has a compliance requirement to encrypt data with keys that the company manages and that are not accessible to the cloud provider. Which encryption approach should the company use?
Select an answer first
27application · medium
A small business uses a cloud-based email and document suite (SaaS) for all employees. The IT manager wants to ensure that company data is protected if an employee's device is lost or stolen. Which action is the most effective for the IT manager to take?
Select an answer first
28application · medium
A multinational company must store European customer data in a specific EU country to comply with data residency regulations. The company also wants to use a cloud provider for analytics. Which cloud deployment consideration is most important?
Select an answer first
29application · medium
A company uses a cloud-based file sharing service to collaborate with external partners. The security team wants to ensure that partners can only access specific folders and that their access can be revoked quickly. Which access control approach should be used?
Select an answer first
30application · medium
A company's cloud storage bucket was accidentally made public, exposing customer data. The security team wants to prevent this from happening again. Which combination of actions is the most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.