A small business is moving to a cloud-based productivity suite. The owner wants to protect accounts from credential theft but is concerned about the cost and complexity of hardware tokens. Which MFA implementation provides a reasonable level of security without requiring additional hardware?

Send a one-time code via email for every login

Rely on IP-based access restrictions only

Require only a strong password and security questions

Use a mobile authenticator app that generates TOTP codes

A company uses a cloud environment with many projects. They want to ensure that administrators can only manage resources in their own project, not others. What is the best way to enforce this?

Use a single shared administrator account for all projects

Assign each administrator the Owner role on their own project only

Create a custom role with management permissions and assign it at the project level for each administrator

Assign all administrators the Owner role at the organization level

Which of the following is a common challenge when deploying MFA in a cloud environment?

Elimination of all password-related risks

Guaranteed prevention of account takeover

Increased user friction during the login process

Complete removal of the need for user training

Which of the following is a common method for implementing MFA in cloud environments?

Push notification to a mobile device

EC-CouncilCloud Security Essentials

Domain 2Objective 4

Multifactor Authentication and Least Privilege CSE Practice Questions (Page 7)

Part of the Identity and Access Management in the Cloud domain, which makes up ~12% of our current practice bank.

50questions here

10free pages

8concepts

Questions 31–35

31application · medium
A small business is moving to a cloud-based productivity suite. The owner wants to protect accounts from credential theft but is concerned about the cost and complexity of hardware tokens. Which MFA implementation provides a reasonable level of security without requiring additional hardware?
Select an answer first
32application · medium
A company is implementing MFA for cloud access. They want to use a method that does not require a cellular connection and is considered more secure than SMS. Which method should they choose?
Select an answer first
33application · medium
A company uses a cloud environment with many projects. They want to ensure that administrators can only manage resources in their own project, not others. What is the best way to enforce this?
Select an answer first
34foundation · easy
Which of the following is a common challenge when deploying MFA in a cloud environment?
Select an answer first
35foundation · easy
Which of the following is a common method for implementing MFA in cloud environments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.