A company is evaluating moving from IaaS to PaaS for a new application. Which security responsibility will shift from the company to the cloud provider?

Managing user identities and access

Patching the operating system and middleware

Configuring network access controls for the application

Managing application code and data

A startup needs to launch a new web service with unpredictable traffic. They want to avoid paying for idle capacity and need to scale automatically. They also require the ability to run custom code and manage their own authentication. Which combination of cloud characteristics and service model best fits?

Public cloud with PaaS and rapid elasticity

Private cloud with PaaS and rapid elasticity

Public cloud with IaaS and manual scaling

A company is using a SaaS email service. A security breach occurs because an employee's account credentials were phished. According to the shared responsibility model, who is primarily responsible for this breach?

No one, because phishing is an unavoidable risk

The company, because they are responsible for user identity and access management

The cloud provider's network team, because they own the network

The SaaS provider, because they manage the email servers

A regional hospital network must share a patient-triage application with three other independent hospitals in the same state. Each hospital requires its own isolated data storage and separate administrative control, but they all want to pool funding for the shared application platform. Which deployment model best meets these requirements?

Hybrid cloud combining each hospital's on-premises data center with a public provider

Private cloud owned by one hospital with guest access for the others

Community cloud shared by the four hospitals

Public cloud with a single multi-tenant application instance

A company is experiencing unpredictable demand for its application. They want to ensure they only pay for what they use, but they also need to guarantee that the application can handle sudden spikes without performance degradation. Which combination of cloud characteristics and service model is most appropriate?

Resource pooling with private cloud

EC-CouncilCloud Security Essentials

Domain 1Objective 1

Cloud Computing Types and Service Models CSE Practice Questions (Page 4)

Part of the Cloud Computing and Security Fundamentals domain, which makes up ~12% of our current practice bank.

29questions here

6free pages

4concepts

Questions 16–20

16application · medium
A company is evaluating moving from IaaS to PaaS for a new application. Which security responsibility will shift from the company to the cloud provider?
Select an answer first
17expert · hard
A startup needs to launch a new web service with unpredictable traffic. They want to avoid paying for idle capacity and need to scale automatically. They also require the ability to run custom code and manage their own authentication. Which combination of cloud characteristics and service model best fits?
Select an answer first
18application · medium
A company is using a SaaS email service. A security breach occurs because an employee's account credentials were phished. According to the shared responsibility model, who is primarily responsible for this breach?
Select an answer first
19application · medium
A regional hospital network must share a patient-triage application with three other independent hospitals in the same state. Each hospital requires its own isolated data storage and separate administrative control, but they all want to pool funding for the shared application platform. Which deployment model best meets these requirements?
Select an answer first
20expert · hard
A company is experiencing unpredictable demand for its application. They want to ensure they only pay for what they use, but they also need to guarantee that the application can handle sudden spikes without performance degradation. Which combination of cloud characteristics and service model is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.

Cloud Computing Types and Service Models CSE Practice Questions (Page 4)

Questions 16–20

A company is evaluating moving from IaaS to PaaS for a new application. Which security responsibility will shift from the company to the cloud provider?

A company is using a SaaS email service. A security breach occurs because an employee's account credentials were phished. According to the shared responsibility model, who is primarily responsible for this breach?

Keep studying — Cloud Computing and Security Fundamentals