A company uses a cloud object storage service to store sensitive documents. They want to protect the data from unauthorized access if the storage credentials are compromised. Which control is most effective for this purpose?

Use client-side encryption with keys managed by the company.

Enable versioning on the bucket.

Enable server-side encryption for the objects.

Set a short lifecycle policy to delete objects after 30 days.

A healthcare organization plans to store patient records in a public cloud. The compliance team requires that data remain within a specific country. Which control is most directly required?

Encrypt all data with customer-managed keys

Use a private cloud deployment model

Select a cloud region located in that country and configure data residency policies

Enable multi-factor authentication for all users

Which statement accurately describes the shared responsibility model in cloud computing?

The cloud provider is responsible for all security aspects, including customer data.

The customer is responsible for all security aspects, including physical infrastructure.

Security responsibilities are determined solely by the cloud provider's policies.

Security responsibilities are shared, with the provider securing the infrastructure and the customer securing their data and applications.

An organization runs multiple VMs on a single ESXi host. An auditor notes that VMs with different trust levels share the same virtual switch and that the hypervisor management interface is accessible from the general corporate network. Which two changes should the administrator prioritize?

Enable VM encryption and disable USB passthrough.

Apply the latest patches to the guest OSes and enable snapshots.

Segment VMs onto separate virtual switches or VLANs and restrict management access to a dedicated management network.

Move all VMs to a public cloud and use a VPN.

A company moves a web application to an IaaS cloud. The provider supplies the virtual machines, hypervisor, and physical network. The customer is responsible for securing which of the following?

The guest operating system and application code

The physical hosts and hypervisor

The cloud provider's data center perimeter

EC-CouncilCertified Security Specialist

Domain 2Objective 1

Virtualization and Cloud Computing Security ECSS Practice Questions (Page 3)

Part of the Network Defense Systems and Monitoring domain, which makes up ~14% of our current practice bank.

50questions here

10free pages

8concepts

Questions 11–15

11application · medium
A company uses a cloud object storage service to store sensitive documents. They want to protect the data from unauthorized access if the storage credentials are compromised. Which control is most effective for this purpose?
Select an answer first
12application · medium
A healthcare organization plans to store patient records in a public cloud. The compliance team requires that data remain within a specific country. Which control is most directly required?
Select an answer first
13foundation · easy
Which statement accurately describes the shared responsibility model in cloud computing?
Select an answer first
14application · medium
An organization runs multiple VMs on a single ESXi host. An auditor notes that VMs with different trust levels share the same virtual switch and that the hypervisor management interface is accessible from the general corporate network. Which two changes should the administrator prioritize?
Select an answer first
15application · medium
A company moves a web application to an IaaS cloud. The provider supplies the virtual machines, hypervisor, and physical network. The customer is responsible for securing which of the following?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.