A company has a policy that SSH keys for cloud VMs must be rotated every 90 days. What is the best way to implement this?

Manually generate new keys and update each VM every 90 days.

Use a central key management service to store and rotate keys automatically.

Use the same key for all VMs to simplify rotation.

What is the purpose of auditing remote access sessions?

To increase the speed of remote connections

To provide a record of actions for compliance and incident investigation

To eliminate the need for encryption

To automatically block all remote access

What is the main purpose of a jump server in a cloud environment?

To provide a secure intermediary for administrative access to other VMs

To host public-facing web applications

To balance traffic between multiple VMs

Why is regular rotation of SSH keys considered a best practice?

To eliminate the need for passwords

To reduce the risk of compromised keys being used over a long period

To increase the speed of authentication

To allow multiple users to share the same key

A company has a bastion host in a public subnet. They want to restrict SSH access to only the security team's IP range, but the team uses dynamic IPs. They also need to log all SSH sessions. Which solution is the most secure and practical?

Allow SSH from any source and rely on strong authentication.

Change the SSH port to a non-standard port.

Use Azure Bastion instead of a custom bastion host.

Use a VPN that the security team must connect to before accessing the bastion, and restrict the bastion's NSG to the VPN gateway's IP.

EC-CouncilCloud Security Essentials

Domain 4Objective 4

Remote Access and Connections CSE Practice Questions (Page 7)

Part of the Network Security in the Cloud domain, which makes up ~10% of our current practice bank.

46questions here

10free pages

8concepts

Questions 31–35

31application · medium
A company has a policy that SSH keys for cloud VMs must be rotated every 90 days. What is the best way to implement this?
Select an answer first
32foundation · easy
What is the purpose of auditing remote access sessions?
Select an answer first
33foundation · easy
What is the main purpose of a jump server in a cloud environment?
Select an answer first
34foundation · easy
Why is regular rotation of SSH keys considered a best practice?
Select an answer first
35expert · hard
A company has a bastion host in a public subnet. They want to restrict SSH access to only the security team's IP range, but the team uses dynamic IPs. They also need to log all SSH sessions. Which solution is the most secure and practical?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.