Which cloud-specific incident response challenge is related to the ephemeral nature of cloud resources?

Difficulty in identifying the attacker

Evidence may be lost when resources are terminated

A company is deploying a containerized application on a cloud platform. They need to ensure that containers cannot communicate with each other unless explicitly allowed. Which security control should they implement?

Rely on the container runtime's default settings

Use a flat network with no restrictions for simplicity

Implement network policies that define allowed communication between pods

Which forensic consideration is unique to cloud environments and must be addressed during incident response?

Data residency and jurisdiction

Chain of custody for physical evidence

Physical access to the hard drive

EC-CouncilCloud Security Essentials

Domain 1Objective 5

Cloud Security Design Principles and Architecture CSE Practice Questions (Page 7)

Part of the Cloud Computing and Security Fundamentals domain, which makes up ~12% of our current practice bank.

48questions here

10free pages

9concepts

9 Concepts in This Objective

Cloud Security Design Principles
Cloud Architecture Security
Shared Responsibility Model
Threat Modeling for Cloud
Identity and Access Management (IAM) in Cloud
Data Protection in Cloud
Network Security in Cloud
Compliance and Governance in Cloud
Incident Response in Cloud

Questions 31–35

31foundation · easy
Which cloud-specific incident response challenge is related to the ephemeral nature of cloud resources?
Select an answer first
32application · medium
A company is deploying a containerized application on a cloud platform. They need to ensure that containers cannot communicate with each other unless explicitly allowed. Which security control should they implement?
Select an answer first
33foundation · easy
Which network security technique divides a cloud network into smaller, isolated segments to limit the blast radius of a security breach?
Select an answer first
34foundation · easy
Which forensic consideration is unique to cloud environments and must be addressed during incident response?
Select an answer first
35foundation · easy
Which IAM component determines what an authenticated user is allowed to do with a cloud resource?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.

Cloud Security Design Principles and Architecture CSE Practice Questions (Page 7)

Questions 31–35

Which cloud-specific incident response challenge is related to the ephemeral nature of cloud resources?

A company is deploying a containerized application on a cloud platform. They need to ensure that containers cannot communicate with each other unless explicitly allowed. Which security control should they implement?

Which network security technique divides a cloud network into smaller, isolated segments to limit the blast radius of a security breach?

Which forensic consideration is unique to cloud environments and must be addressed during incident response?

Which IAM component determines what an authenticated user is allowed to do with a cloud resource?

Keep studying — Cloud Computing and Security Fundamentals