A company is migrating a legacy application to the cloud. The application requires a specific operating system version that the cloud provider does not offer as a managed service. The company's security policy mandates that all systems receive security patches within 48 hours of release. Which approach best satisfies the patching requirement?

Use IaaS and configure automated patching for the guest OS

Use IaaS and rely on the provider to patch the guest OS

Use SaaS and assume the provider patches the application

Use PaaS and rely on the provider to patch the OS

A company is considering moving its on-premises servers to a cloud provider. The IT manager is concerned about who is responsible for securing the network infrastructure. Which statement best describes the shared responsibility model?

The customer is responsible for all network security, including physical infrastructure.

The customer secures the physical network, and the provider secures the virtual network.

The provider secures the physical network, and the customer secures the virtual network configurations.

The provider is responsible for all network security, including virtual networks.

A company uses a SaaS email service. An employee's account is compromised because the employee reused a password that appeared in a public data breach. The company wants to prevent this from happening again. Which action is the company's responsibility under the shared responsibility model?

Monitoring the email service's physical data center for intrusions

Configuring the email service's network firewall

Enforcing multi-factor authentication for all user accounts

Deploying a patch to the email service's authentication server

EC-CouncilCloud Security Essentials

Domain 1Objective 2

Shared Cloud Security Responsibility CSE Practice Questions (Page 8)

Part of the Cloud Computing and Security Fundamentals domain, which makes up ~12% of our current practice bank.

38questions here

8free pages

5concepts

Questions 36–38

36expert · hard
A company is migrating a legacy application to the cloud. The application requires a specific operating system version that the cloud provider does not offer as a managed service. The company's security policy mandates that all systems receive security patches within 48 hours of release. Which approach best satisfies the patching requirement?
Select an answer first
37application · medium
A company is considering moving its on-premises servers to a cloud provider. The IT manager is concerned about who is responsible for securing the network infrastructure. Which statement best describes the shared responsibility model?
Select an answer first
38application · medium
A company uses a SaaS email service. An employee's account is compromised because the employee reused a password that appeared in a public data breach. The company wants to prevent this from happening again. Which action is the company's responsibility under the shared responsibility model?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.

Shared Cloud Security Responsibility CSE Practice Questions (Page 8)

Questions 36–38

A company is considering moving its on-premises servers to a cloud provider. The IT manager is concerned about who is responsible for securing the network infrastructure. Which statement best describes the shared responsibility model?

A company uses a SaaS email service. An employee's account is compromised because the employee reused a password that appeared in a public data breach. The company wants to prevent this from happening again. Which action is the company's responsibility under the shared responsibility model?

Keep studying — Cloud Computing and Security Fundamentals