In the shared responsibility model, which of the following is typically the responsibility of the cloud customer?

Maintaining the underlying network infrastructure

Managing access to their data and applications

Securing the physical data center

What is the primary purpose of the CSA Cloud Controls Matrix (CCM)?

To provide a framework of security controls for cloud computing that can be mapped to compliance requirements

To define a common set of cloud service level agreements

To certify cloud service providers as secure

To provide a risk assessment methodology for cloud providers

Which of the following is a key requirement of the HIPAA Security Rule that applies to cloud-based healthcare data?

Obtaining written consent from patients before sharing data with cloud providers

Ensuring all ePHI is stored within the United States

Implementing technical safeguards to protect electronic protected health information (ePHI)

Conducting annual security training for all cloud provider employees

Which of the following is a GDPR requirement for cloud data processing?

Data processors must maintain records of processing activities

All personal data must be stored within the EU

Cloud providers must obtain consent from data subjects directly

Data processors must appoint a data protection officer in all cases

EC-CouncilCloud Security Essentials

Domain 8Objective 2

Cloud Security Standards CSE Practice Questions (Page 9)

Part of the Cloud Compliance and Governance domain, which makes up ~13% of our current practice bank.

46questions here

10free pages

12concepts

12 Concepts in This Objective

Cloud security standards overview
ISO/IEC 27017
ISO/IEC 27018
CSA Cloud Controls Matrix (CCM)
NIST cloud security standards
SOC 2 for cloud services
PCI DSS in cloud environments
HIPAA and cloud compliance
GDPR and cloud data protection
FedRAMP for government clouds
Shared responsibility model in standards
Mapping standards to organizational controls

Questions 41–45

41foundation · easy
In the shared responsibility model, which of the following is typically the responsibility of the cloud customer?
Select an answer first
42application · medium
A healthcare SaaS provider processes personal data of EU patients and stores it in a public cloud. The provider wants to demonstrate to customers that it has implemented strong privacy controls specifically for PII in the cloud, beyond what its ISO/IEC 27001 certification covers. Which certification should the provider pursue?
Select an answer first
43foundation · easy
What is the primary purpose of the CSA Cloud Controls Matrix (CCM)?
Select an answer first
44foundation · easy
Which of the following is a key requirement of the HIPAA Security Rule that applies to cloud-based healthcare data?
Select an answer first
45foundation · easy
Which of the following is a GDPR requirement for cloud data processing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.