What is the primary purpose of governance policies in a cloud environment?

To encrypt all data stored in the cloud

To provide a user interface for managing cloud resources

To ensure that cloud resources are used in accordance with organizational objectives and compliance requirements

To automatically scale cloud resources based on demand

A company is subject to GDPR and experiences a data breach involving personal data stored in a public cloud. The breach was caused by a misconfigured storage bucket. Which of the following steps is REQUIRED by GDPR?

Delete all personal data from the cloud immediately.

Notify the supervisory authority within 72 hours of becoming aware of the breach.

Conduct a penetration test to identify the root cause.

Notify all affected data subjects immediately, regardless of risk.

A security team is evaluating the use of a cloud access security broker (CASB) to protect their SaaS applications. They want to gain visibility into user activity and enforce data loss prevention policies. Which CASB deployment mode is most appropriate?

API-based mode, which connects directly to the SaaS application's API.

Log collection mode, which only collects logs from the SaaS application.

Forward proxy mode, which routes traffic through the CASB.

Reverse proxy mode, which sits in front of the SaaS application.

EC-CouncilCertified Security Specialist

Domain 4Objective 5

Cloud Computing Threats and Countermeasures ECSS Practice Questions (Page 2)

Part of the Ethical Hacking Advanced Attacks and Penetration Testing domain, which makes up ~17% of our current practice bank.

43questions here

9free pages

6concepts

Questions 6–10

6foundation · easy
Which cloud attack vector is characterized by an attacker exploiting vulnerabilities in the shared infrastructure to gain unauthorized access to another customer's data or resources?
Select an answer first
7foundation · easy
What is the primary purpose of governance policies in a cloud environment?
Select an answer first
8foundation · easy
Which cloud deployment model is characterized by infrastructure that is shared by several organizations with common interests, such as regulatory requirements or policy concerns?
Select an answer first
9expert · hard
A company is subject to GDPR and experiences a data breach involving personal data stored in a public cloud. The breach was caused by a misconfigured storage bucket. Which of the following steps is REQUIRED by GDPR?
Select an answer first
10expert · hard
A security team is evaluating the use of a cloud access security broker (CASB) to protect their SaaS applications. They want to gain visibility into user activity and enforce data loss prevention policies. Which CASB deployment mode is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Cloud Computing Threats and Countermeasures ECSS Practice Questions (Page 2)

Questions 6–10

Which cloud attack vector is characterized by an attacker exploiting vulnerabilities in the shared infrastructure to gain unauthorized access to another customer's data or resources?

What is the primary purpose of governance policies in a cloud environment?

Which cloud deployment model is characterized by infrastructure that is shared by several organizations with common interests, such as regulatory requirements or policy concerns?

A company is subject to GDPR and experiences a data breach involving personal data stored in a public cloud. The breach was caused by a misconfigured storage bucket. Which of the following steps is REQUIRED by GDPR?

A security team is evaluating the use of a cloud access security broker (CASB) to protect their SaaS applications. They want to gain visibility into user activity and enforce data loss prevention policies. Which CASB deployment mode is most appropriate?

Keep studying — Ethical Hacking Advanced Attacks and Penetration Testing