A security analyst notices that a cloud storage bucket is publicly readable because the 'public access' setting was enabled during a routine change. Which cloud threat does this represent, and what is the best immediate countermeasure?

Denial of service; increase bucket quota

Insecure API; rotate all API keys

Misconfiguration; disable public access and enable access logging

Data breach; notify all customers immediately

A security team is investigating a suspected VM escape on a Type 1 hypervisor. They have limited resources and need to confirm the attack while minimizing further risk. Which action should they take first?

Delete the affected VM and all its snapshots

Apply the latest hypervisor patch without rebooting

Reboot the hypervisor immediately to clear any malicious processes

Isolate the affected VM from the network and preserve its memory for forensic analysis

A healthcare organization must run an application that processes patient data. Regulatory requirements mandate that the data remain within the country's borders. The organization wants to use a cloud provider. Which deployment model and control best satisfy the requirement?

Community cloud shared with other healthcare organizations in the same country.

Public cloud with a region located inside the required country and data residency policies enforced.

Private cloud hosted on-premises, regardless of location.

Hybrid cloud with the database on-premises and the application in the public cloud.

Which cloud service model provides customers with virtualized computing resources, such as virtual machines and storage, over the internet?

Infrastructure as a Service (IaaS)

What is an appropriate countermeasure to protect against insecure APIs in cloud services?

Relying on the cloud provider to secure all API interactions.

Implementing strong authentication and authorization for API access.

Using only HTTP for API communication to simplify monitoring.

Disabling all APIs to eliminate the risk.

EC-CouncilCertified Security Specialist

Domain 2Objective 1

Virtualization and Cloud Computing Security ECSS Practice Questions (Page 1)

Part of the Network Defense Systems and Monitoring domain, which makes up ~14% of our current practice bank.

50questions here

10free pages

8concepts

Questions 1–5

1application · medium
A security analyst notices that a cloud storage bucket is publicly readable because the 'public access' setting was enabled during a routine change. Which cloud threat does this represent, and what is the best immediate countermeasure?
Select an answer first
2expert · hard
A security team is investigating a suspected VM escape on a Type 1 hypervisor. They have limited resources and need to confirm the attack while minimizing further risk. Which action should they take first?
Select an answer first
3application · medium
A healthcare organization must run an application that processes patient data. Regulatory requirements mandate that the data remain within the country's borders. The organization wants to use a cloud provider. Which deployment model and control best satisfy the requirement?
Select an answer first
4foundation · easy
Which cloud service model provides customers with virtualized computing resources, such as virtual machines and storage, over the internet?
Select an answer first
5foundation · easy
What is an appropriate countermeasure to protect against insecure APIs in cloud services?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.