A cloud application is deployed and the security team needs to detect and respond to security incidents. They want to centralize logs from the application, the cloud platform, and the network. Which practice should be implemented?

Enable logging on all components and aggregate logs into a centralized security information and event management (SIEM) system.

Use a configuration management tool to periodically collect logs and store them in a local file server.

Enable logging only for the application and ignore platform and network logs.

Store logs locally on each component and review them only when an incident is reported.

A cloud application is experiencing a security incident. The security team needs to quickly identify the scope of the incident and contain it. Which practice is most effective for incident response in the cloud?

Shut down the entire cloud environment to prevent further damage.

Wait for the incident to be reported by users before taking action.

Ignore the incident and continue normal operations.

Use automated monitoring and alerting to detect the incident and isolate affected resources.

A company wants to implement DevSecOps in their cloud environment. They have a compliance requirement to audit all changes to their infrastructure. Which practice should be integrated into their CI/CD pipeline to meet this requirement?

Use a configuration management tool to apply changes directly to servers without version control.

Manually document all changes in a spreadsheet after deployment.

Allow developers to make changes directly to the production environment.

Use infrastructure as code (IaC) and store all templates in a version control system.

Which action is a key part of incident response for a cloud application?

Deleting all logs to clean up evidence

Isolating affected resources to prevent further damage

Restarting the application without investigating the root cause

Ignoring the incident if it only affects a non-critical component

Which practice is a key aspect of immutable infrastructure in cloud deployment?

Applying patches to running servers regularly

Replacing servers with new instances instead of modifying existing ones

Using configuration management tools to update servers in place

Manually configuring each server after deployment

EC-CouncilCloud Security Essentials

Domain 5Objective 1

Secure Software Development Lifecycle (SDLC) in the Cloud CSE Practice Questions (Page 3)

Part of the Application Security in the Cloud domain, which makes up ~16% of our current practice bank.

48questions here

10free pages

10concepts

Questions 11–15

11application · medium
A cloud application is deployed and the security team needs to detect and respond to security incidents. They want to centralize logs from the application, the cloud platform, and the network. Which practice should be implemented?
Select an answer first
12application · medium
A cloud application is experiencing a security incident. The security team needs to quickly identify the scope of the incident and contain it. Which practice is most effective for incident response in the cloud?
Select an answer first
13expert · hard
A company wants to implement DevSecOps in their cloud environment. They have a compliance requirement to audit all changes to their infrastructure. Which practice should be integrated into their CI/CD pipeline to meet this requirement?
Select an answer first
14foundation · easy
Which action is a key part of incident response for a cloud application?
Select an answer first
15foundation · easy
Which practice is a key aspect of immutable infrastructure in cloud deployment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.