A company stores sensitive customer data in a cloud database. They must protect the data from insider threats, but they also need to allow database administrators to perform routine maintenance. Which data protection countermeasure balances both requirements?

Place the database in a private subnet with strict security groups

Encrypt the entire database and give administrators the decryption key

Use data masking to hide sensitive values from administrators who do not need to see them

Enable detailed audit logging on the database

A financial services company must comply with a regulation that requires logging of all access to customer data and periodic review of user permissions. Which countermeasure set best meets this requirement?

Implement multi-factor authentication for all administrators.

Deploy a network firewall and segment the environment into multiple VPCs.

Enable audit logging on all data services and implement a quarterly access review process.

Encrypt all customer data with strong encryption and use tokenization for storage.

A company runs a public-facing web application in the cloud. They need to protect the application from DDoS attacks, but they also need to allow legitimate traffic from users around the world. Which network security countermeasure is most appropriate?

Place the application in a private subnet with no public access

Use a security group that limits the number of connections per source IP

Use a cloud-based DDoS protection service that filters traffic at the edge

Restrict access to the application by geographic IP blocking

What is the primary purpose of network segmentation in a cloud environment?

To increase the speed of network traffic

To limit lateral movement in case of a breach

To simplify the management of security groups

To reduce the number of public IP addresses needed

EC-CouncilEthical Hacking Essentials

Domain 8Objective 3

Cloud Attack Countermeasures EHE Practice Questions (Page 4)

Part of the Cloud Computing and Penetration Testing domain, which makes up ~12% of our current practice bank.

42questions here

9free pages

8concepts

8 Concepts in This Objective

Cloud Attack Countermeasures Overview
Identity and Access Management (IAM) Countermeasures
Data Protection Countermeasures
Network Security Countermeasures
Application Security Countermeasures
Monitoring and Logging Countermeasures
Incident Response and Recovery Countermeasures
Compliance and Governance Countermeasures

Questions 16–20

16expert · hard
A company stores sensitive customer data in a cloud database. They must protect the data from insider threats, but they also need to allow database administrators to perform routine maintenance. Which data protection countermeasure balances both requirements?
Select an answer first
17foundation · easy
Which application security countermeasure is most effective at addressing known vulnerabilities in cloud-hosted software?
Select an answer first
18application · medium
A financial services company must comply with a regulation that requires logging of all access to customer data and periodic review of user permissions. Which countermeasure set best meets this requirement?
Select an answer first
19expert · hard
A company runs a public-facing web application in the cloud. They need to protect the application from DDoS attacks, but they also need to allow legitimate traffic from users around the world. Which network security countermeasure is most appropriate?
Select an answer first
20foundation · easy
What is the primary purpose of network segmentation in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.