Which activity is essential for securing a CI/CD pipeline in a cloud environment?

Allowing developers to deploy directly to production without review

Storing secrets in the source code repository for easy access

Scanning container images for vulnerabilities before deployment

Disabling build logs to protect intellectual property

A company wants to deploy a cloud application using immutable infrastructure. They need to ensure that any change to the application requires a new deployment, not a modification to the existing environment. Which deployment practice aligns with this requirement?

Create a new server image with the updated application and deploy it to replace the old ones.

Use a configuration management tool to update the existing servers in place.

Use a load balancer to route traffic to a mix of old and new server versions.

Manually apply patches to the running servers.

Which practice is fundamental for detecting security incidents in a cloud application during operations?

Reviewing logs only after a breach is reported

Disabling logging to reduce storage costs

Storing logs in the same server they are generated from

Centralized logging and monitoring of application and infrastructure events

A developer is building a cloud application that exposes a REST API. The API accepts user input and processes it. Which practice is most important to secure the API?

Use a complex URL structure to make the API harder to find.

Implement authentication and authorization for all API endpoints.

Use a fast API framework to improve performance.

Document the API thoroughly for developers.

Which statement best describes how the traditional SDLC phases adapt when developing applications for the cloud?

The phases are adapted to be more iterative and continuous, integrating security throughout the lifecycle.

The phases are replaced entirely by automated tools, eliminating the need for human oversight.

The phases remain sequential and rigid, with security reviews only at the end.

The phases are unchanged, but all testing is performed in production.

EC-CouncilCloud Security Essentials

Domain 5Objective 1

Secure Software Development Lifecycle (SDLC) in the Cloud CSE Practice Questions (Page 8)

Part of the Application Security in the Cloud domain, which makes up ~16% of our current practice bank.

48questions here

10free pages

10concepts

Questions 36–40

36foundation · easy
Which activity is essential for securing a CI/CD pipeline in a cloud environment?
Select an answer first
37expert · hard
A company wants to deploy a cloud application using immutable infrastructure. They need to ensure that any change to the application requires a new deployment, not a modification to the existing environment. Which deployment practice aligns with this requirement?
Select an answer first
38foundation · easy
Which practice is fundamental for detecting security incidents in a cloud application during operations?
Select an answer first
39application · medium
A developer is building a cloud application that exposes a REST API. The API accepts user input and processes it. Which practice is most important to secure the API?
Select an answer first
40foundation · easy
Which statement best describes how the traditional SDLC phases adapt when developing applications for the cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.