A security team wants to enforce least privilege for a cloud environment. They need to manage and monitor privileged access, including the ability to approve or deny access requests. Which tool should they use?

Privileged Access Management (PAM)

An organization is migrating to a cloud environment. They want to ensure that each user has only the permissions necessary for their job function. Which approach should they take?

Give each user individual permissions directly

Create custom roles with specific permissions and assign them to users based on job function

Assign all users the same broad role

A cloud environment has multiple teams: developers, testers, and operations. Each team needs different levels of access. What is the best way to manage permissions using RBAC?

Use a single admin role for everyone

Create a role for each team and assign users to their respective roles

Create individual permissions for each user

A global company is deploying MFA for all users. They have a mix of employees in regions with unreliable internet and some who travel frequently. They also need to comply with regulations that require phishing-resistant MFA for privileged accounts. Which MFA strategy should they adopt?

Use FIDO2 security keys for privileged accounts and TOTP for standard users

Use TOTP for all users, including privileged accounts

Use SMS for all users because it works everywhere

Use push notifications for all users

A cloud administrator is designing IAM roles for a new application. The application needs to read from a storage bucket and write logs to a logging service. According to least privilege, what should the administrator do?

Grant the application full administrative access to the cloud account

Grant the application a single role with both read and write permissions to all resources

Use the same role as other applications in the organization

Create two separate roles: one with read-only access to the storage bucket and another with write-only access to the logging service

EC-CouncilCloud Security Essentials

Domain 2Objective 4

Multifactor Authentication and Least Privilege CSE Practice Questions (Page 5)

Part of the Identity and Access Management in the Cloud domain, which makes up ~12% of our current practice bank.

50questions here

10free pages

8concepts

Questions 21–25

21application · medium
A security team wants to enforce least privilege for a cloud environment. They need to manage and monitor privileged access, including the ability to approve or deny access requests. Which tool should they use?
Select an answer first
22application · medium
An organization is migrating to a cloud environment. They want to ensure that each user has only the permissions necessary for their job function. Which approach should they take?
Select an answer first
23application · medium
A cloud environment has multiple teams: developers, testers, and operations. Each team needs different levels of access. What is the best way to manage permissions using RBAC?
Select an answer first
24expert · medium
A global company is deploying MFA for all users. They have a mix of employees in regions with unreliable internet and some who travel frequently. They also need to comply with regulations that require phishing-resistant MFA for privileged accounts. Which MFA strategy should they adopt?
Select an answer first
25application · medium
A cloud administrator is designing IAM roles for a new application. The application needs to read from a storage bucket and write logs to a logging service. According to least privilege, what should the administrator do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.