Which countermeasure is specifically designed to filter and monitor HTTP traffic to protect a cloud web application from attacks like SQL injection and cross-site scripting?

Intrusion detection system (IDS)

Security information and event management (SIEM)

A company's cloud environment was breached, and the security team is unsure how the attacker gained access. Which monitoring countermeasure would provide the most useful information for the investigation?

Centralize and retain logs from all cloud services and user activities

Deploy a web application firewall

Enable multi-factor authentication for all users

A company runs a multi-tier web application in the cloud. The web tier is public-facing, while the database tier should only be accessible from the web tier. Which network security countermeasure best enforces this segmentation?

Assign public IP addresses to the database instances and restrict access by IP whitelisting

Place the web and database tiers in the same subnet and rely on host-based firewalls

Configure the database to require multi-factor authentication for all connections

Use security groups that allow the database tier to accept traffic only from the web tier's security group

What is the primary purpose of continuous monitoring in a cloud environment?

To automatically remediate all security incidents

To replace the need for incident response planning

To detect suspicious activities and potential security incidents in real time

To ensure compliance with all regulatory standards automatically

EC-CouncilEthical Hacking Essentials

Domain 8Objective 3

Cloud Attack Countermeasures EHE Practice Questions (Page 1)

Part of the Cloud Computing and Penetration Testing domain, which makes up ~12% of our current practice bank.

42questions here

9free pages

8concepts

8 Concepts in This Objective

Cloud Attack Countermeasures Overview
Identity and Access Management (IAM) Countermeasures
Data Protection Countermeasures
Network Security Countermeasures
Application Security Countermeasures
Monitoring and Logging Countermeasures
Incident Response and Recovery Countermeasures
Compliance and Governance Countermeasures

Questions 1–5

1foundation · easy
Which countermeasure is specifically designed to filter and monitor HTTP traffic to protect a cloud web application from attacks like SQL injection and cross-site scripting?
Select an answer first
2application · medium
A company's cloud environment was breached, and the security team is unsure how the attacker gained access. Which monitoring countermeasure would provide the most useful information for the investigation?
Select an answer first
3foundation · easy
Which cloud network security component acts as a virtual firewall that controls inbound and outbound traffic at the instance level?
Select an answer first
4application · medium
A company runs a multi-tier web application in the cloud. The web tier is public-facing, while the database tier should only be accessible from the web tier. Which network security countermeasure best enforces this segmentation?
Select an answer first
5foundation · easy
What is the primary purpose of continuous monitoring in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.