Which security control is used to ensure that only authorized users can access cloud resources, and typically includes features like multi-factor authentication?

Identity and Access Management (IAM)

A security analyst is reviewing a virtualized environment where a critical application server runs on a Type 2 hypervisor on a workstation. The analyst is concerned about the risk of a compromised guest VM gaining access to the host operating system. Which control most directly reduces this specific risk?

Move the VM to a Type 1 hypervisor and disable unnecessary management interfaces.

Install host-based antivirus on the guest VM.

Place the VM on a separate VLAN from other guests.

Enable snapshotting of the VM to allow quick rollback after an attack.

A company uses a public IaaS provider. A developer accidentally leaves an object storage bucket publicly readable, exposing customer data. Which combination of controls would best prevent this class of incident?

Require multi-factor authentication for all developer accounts.

Use infrastructure-as-code with automated policy checks that reject public bucket configurations.

Enable bucket-level access logging and configure alerts for public exposure.

Encrypt all objects in the bucket with server-side encryption.

EC-CouncilCertified Security Specialist

Domain 2Objective 1

Virtualization and Cloud Computing Security ECSS Practice Questions (Page 5)

Part of the Network Defense Systems and Monitoring domain, which makes up ~14% of our current practice bank.

50questions here

10free pages

8concepts

Questions 21–25

21foundation · easy
Which security control is used to ensure that only authorized users can access cloud resources, and typically includes features like multi-factor authentication?
Select an answer first
22application · medium
A security analyst is reviewing a virtualized environment where a critical application server runs on a Type 2 hypervisor on a workstation. The analyst is concerned about the risk of a compromised guest VM gaining access to the host operating system. Which control most directly reduces this specific risk?
Select an answer first
23application · medium
A company uses a public IaaS provider. A developer accidentally leaves an object storage bucket publicly readable, exposing customer data. Which combination of controls would best prevent this class of incident?
Select an answer first
24foundation · easy
Which type of virtualization is primarily used to abstract physical storage devices and present them as logical storage pools?
Select an answer first
25foundation · easy
Which of the following is a common cloud security threat that occurs when cloud resources are left with insecure default settings or overly permissive access policies?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Virtualization and Cloud Computing Security ECSS Practice Questions (Page 5)

Questions 21–25

Which security control is used to ensure that only authorized users can access cloud resources, and typically includes features like multi-factor authentication?

A company uses a public IaaS provider. A developer accidentally leaves an object storage bucket publicly readable, exposing customer data. Which combination of controls would best prevent this class of incident?

Which type of virtualization is primarily used to abstract physical storage devices and present them as logical storage pools?

Which of the following is a common cloud security threat that occurs when cloud resources are left with insecure default settings or overly permissive access policies?

Keep studying — Network Defense Systems and Monitoring