What is the correct sequence of steps in the cloud risk management process?

Identification, assessment, mitigation, monitoring

Assessment, identification, monitoring, mitigation

Monitoring, mitigation, assessment, identification

Mitigation, monitoring, identification, assessment

A company has identified that its cloud storage buckets are publicly accessible due to misconfiguration. The risk team has classified this as a high-risk issue. Which mitigation strategy is most appropriate to address this risk immediately?

Apply a policy to automatically block public access to all storage buckets.

Document the risk in the risk register and review it annually.

Purchase cyber insurance to cover potential data breach costs.

Accept the risk because the data is not sensitive.

A cloud service provider hosts a platform that processes personal data on behalf of a European company. The company is subject to GDPR. Which governance obligation is the company required to fulfill?

Require the cloud provider to store all data exclusively within the EU.

Obtain explicit consent from the cloud provider before processing any personal data.

Transfer all data processing to the cloud provider to avoid GDPR obligations.

Ensure that the cloud provider offers a data processing agreement (DPA) that includes GDPR-compliant terms.

What is a key advantage of quantitative risk assessment over qualitative risk assessment?

It provides objective, numerical data for cost-benefit analysis

It does not require any expertise to perform

It is faster and requires less data

It eliminates the need for risk monitoring

EC-CouncilCloud Security Essentials

Domain 8Objective 3

Cloud Security Governance and Risk Management CSE Practice Questions (Page 6)

Part of the Cloud Compliance and Governance domain, which makes up ~13% of our current practice bank.

49questions here

10free pages

8concepts

8 Concepts in This Objective

Cloud Security Governance Framework
Cloud Risk Management Process
Cloud Compliance Standards and Regulations
Shared Responsibility Model in Governance
Cloud Policy and Procedure Development
Risk Assessment Methods for Cloud
Cloud Risk Mitigation Strategies
Continuous Monitoring and Improvement

Questions 26–30

26foundation · easy
What is the correct sequence of steps in the cloud risk management process?
Select an answer first
27application · medium
A company has identified that its cloud storage buckets are publicly accessible due to misconfiguration. The risk team has classified this as a high-risk issue. Which mitigation strategy is most appropriate to address this risk immediately?
Select an answer first
28application · medium
A cloud service provider hosts a platform that processes personal data on behalf of a European company. The company is subject to GDPR. Which governance obligation is the company required to fulfill?
Select an answer first
29foundation · easy
What is a key advantage of quantitative risk assessment over qualitative risk assessment?
Select an answer first
30foundation · easy
Which cloud security policy would specify how data should be labeled and handled based on its sensitivity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.