A company's cloud environment has experienced a suspected data breach. The incident response team needs to preserve forensic evidence, but the affected virtual machine is still running and may be needed for business continuity. Which action best balances evidence preservation with operational continuity?

Keep the VM running normally and collect logs after the incident is resolved.

Immediately shut down the VM to preserve the disk state and prevent further compromise.

Take a snapshot of the VM's disk and capture the memory state, then isolate the VM's network access while keeping it running for limited business use.

Delete the VM and restore from the last known good backup to eliminate the threat.

A company uses a cloud provider's identity service for employee access to cloud resources. The company also has an on-premises Active Directory. The security team wants to enforce multi-factor authentication (MFA) for all cloud access while allowing users to use their existing corporate credentials. What should they configure?

Export all on-premises user password hashes to the cloud identity service and use them for direct authentication.

Set up federation between the on-premises identity provider and the cloud identity service, then enforce MFA as a conditional access policy in the cloud.

Use a VPN to connect the on-premises network to the cloud and rely on the VPN's authentication for all cloud access.

Create a separate cloud-only user account for each employee and require them to remember a new password.

EC-CouncilCloud Security Essentials

Domain 1Objective 5

Cloud Security Design Principles and Architecture CSE Practice Questions (Page 3)

Part of the Cloud Computing and Security Fundamentals domain, which makes up ~12% of our current practice bank.

48questions here

10free pages

9concepts

9 Concepts in This Objective

Cloud Security Design Principles
Cloud Architecture Security
Shared Responsibility Model
Threat Modeling for Cloud
Identity and Access Management (IAM) in Cloud
Data Protection in Cloud
Network Security in Cloud
Compliance and Governance in Cloud
Incident Response in Cloud

Questions 11–15

11foundation · easy
In a cloud architecture, which component is secured by implementing multi-factor authentication (MFA) and conditional access policies?
Select an answer first
12expert · hard
A company's cloud environment has experienced a suspected data breach. The incident response team needs to preserve forensic evidence, but the affected virtual machine is still running and may be needed for business continuity. Which action best balances evidence preservation with operational continuity?
Select an answer first
13foundation · easy
Which threat modeling technique involves creating a visual representation of data flows, trust boundaries, and entry points to identify potential threats?
Select an answer first
14application · medium
A company uses a cloud provider's identity service for employee access to cloud resources. The company also has an on-premises Active Directory. The security team wants to enforce multi-factor authentication (MFA) for all cloud access while allowing users to use their existing corporate credentials. What should they configure?
Select an answer first
15foundation · easy
Which secure connectivity option provides a private, encrypted tunnel between an on-premises network and a cloud VPC over the public internet?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.

Cloud Security Design Principles and Architecture CSE Practice Questions (Page 3)

Questions 11–15

In a cloud architecture, which component is secured by implementing multi-factor authentication (MFA) and conditional access policies?

Which threat modeling technique involves creating a visual representation of data flows, trust boundaries, and entry points to identify potential threats?

Which secure connectivity option provides a private, encrypted tunnel between an on-premises network and a cloud VPC over the public internet?

Keep studying — Cloud Computing and Security Fundamentals