A company uses a SaaS HR platform and wants to enforce its existing corporate Active Directory password policy and enable single sign-on for employees. Which IAM approach should the company implement?

Create separate user accounts in the SaaS platform and manually sync passwords

Store the corporate password hash in the SaaS platform for authentication

Use API keys for each employee to access the SaaS platform

Use SAML-based federation between the SaaS platform and Active Directory

A hospital is adopting a SaaS-based electronic health record (EHR) system. The compliance officer asks which party is responsible for ensuring that patient data is encrypted at rest and that access to the data is logged. Based on the shared responsibility model for SaaS, what should the security team tell the compliance officer?

The provider is responsible for everything, including user authentication and defining who can access patient records.

The hospital is responsible for patching the EHR application and securing the underlying servers, while the provider only manages the network.

The hospital must deploy a virtual appliance in the provider's data center to encrypt all traffic and logs.

The SaaS provider is responsible for the underlying infrastructure and application security, but the hospital must configure user access policies, enable audit logging, and verify the provider's encryption settings.

A company is deploying a web application on a cloud VM. They need to ensure that all traffic between the user and the application is encrypted, and that the application's data at rest is encrypted. Which combination of controls should they implement?

Use HTTPS for user traffic and encrypt the VM's disk with a customer-managed key

Use a VPN for all user traffic and no disk encryption

Use HTTP and rely on the cloud provider's network encryption

Use HTTPS but do not encrypt the disk

EC-CouncilCloud Security Essentials

Domain 1Objective 5

Cloud Security Design Principles and Architecture CSE Practice Questions (Page 10)

Part of the Cloud Computing and Security Fundamentals domain, which makes up ~12% of our current practice bank.

48questions here

10free pages

9concepts

9 Concepts in This Objective

Cloud Security Design Principles
Cloud Architecture Security
Shared Responsibility Model
Threat Modeling for Cloud
Identity and Access Management (IAM) in Cloud
Data Protection in Cloud
Network Security in Cloud
Compliance and Governance in Cloud
Incident Response in Cloud

Questions 46–48

46application · medium
A company uses a SaaS HR platform and wants to enforce its existing corporate Active Directory password policy and enable single sign-on for employees. Which IAM approach should the company implement?
Select an answer first
47application · medium
A hospital is adopting a SaaS-based electronic health record (EHR) system. The compliance officer asks which party is responsible for ensuring that patient data is encrypted at rest and that access to the data is logged. Based on the shared responsibility model for SaaS, what should the security team tell the compliance officer?
Select an answer first
48expert · hard
A company is deploying a web application on a cloud VM. They need to ensure that all traffic between the user and the application is encrypted, and that the application's data at rest is encrypted. Which combination of controls should they implement?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.

Cloud Security Design Principles and Architecture CSE Practice Questions (Page 10)

Questions 46–48

A company uses a SaaS HR platform and wants to enforce its existing corporate Active Directory password policy and enable single sign-on for employees. Which IAM approach should the company implement?

A company is deploying a web application on a cloud VM. They need to ensure that all traffic between the user and the application is encrypted, and that the application's data at rest is encrypted. Which combination of controls should they implement?

Keep studying — Cloud Computing and Security Fundamentals