EC-CouncilCloud Security Essentials
Domain 8Objective 2
Cloud Security Standards CSE Practice Questions (Page 7)
Part of the Cloud Compliance and Governance domain, which makes up ~13% of our current practice bank.
46questions here
10free pages
12concepts
Questions 31–35
- 31
A compliance officer is developing a control mapping to align the organization's cloud security controls with multiple standards, including SOC 2 and ISO/IEC 27001. The officer needs to identify which controls in the organization's environment map to the Trust Services Criteria (TSC) and the ISO/IEC 27001 Annex A controls. Which approach should the officer take?
Select an answer first - 32
A cloud service provider (CSP) wants to provide assurance to enterprise customers about the security, availability, and confidentiality of its infrastructure. The CSP has implemented strong internal controls and wants to have an independent auditor evaluate the effectiveness of those controls over a period of time. Which report should the CSP obtain?
Select an answer first - 33
A hospital is moving its patient management system to a public cloud IaaS platform. The hospital will manage the operating system, applications, and data, while the cloud provider manages the physical infrastructure. The hospital must comply with both HIPAA and PCI DSS because it processes ePHI and credit card payments. Which of the following responsibilities falls on the hospital, not the cloud provider?
Select an answer first - 34
A company is adopting a public cloud IaaS model and wants to implement controls that are specific to cloud environments, such as virtual machine isolation and cloud service provider access. The company already has an ISO/IEC 27001-aligned information security management system (ISMS). Which standard should the company use to supplement its ISMS with cloud-specific controls?
Select an answer first - 35
Which NIST publication provides guidance on access control for cloud computing?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.