Which IAM countermeasure is most effective at mitigating the risk of compromised credentials?

Conducting regular security awareness training

Enforcing multi-factor authentication (MFA)

A company is moving a legacy application to the cloud. The security team wants to implement a layered set of countermeasures to protect against common cloud attacks. Which approach best illustrates defense-in-depth?

Deploy a single strong firewall at the cloud perimeter.

Use only encryption for all data at rest and in transit.

Rely on the cloud provider's built-in security features without additional configuration.

Combine network segmentation, IAM least privilege, encryption, and continuous monitoring.

To protect data in transit between a user's browser and a cloud application, which countermeasure should be implemented?

Tokenizing the data before transmission

Encrypting the data using TLS/SSL

Applying data masking at the application layer

Encrypting the data at rest in the database

A company's cloud web application was defaced by an attacker who exploited a known vulnerability in the web server software. Which application security countermeasure would have most likely prevented this?

Place the web server in a private subnet

Use a security group that only allows traffic from the company's office IP range

Regularly patch the web server software

Enable detailed logging on the web server

A company's cloud environment was hit by ransomware that encrypted critical data. The company wants to restore operations quickly and minimize data loss. Which countermeasure is most important?

Enable multi-factor authentication for all users.

Encrypt all data at rest with customer-managed keys.

Maintain immutable backups stored in a separate cloud account or region with versioning enabled.

Deploy a web application firewall to block malicious traffic.

EC-CouncilEthical Hacking Essentials

Domain 8Objective 3

Cloud Attack Countermeasures EHE Practice Questions (Page 5)

Part of the Cloud Computing and Penetration Testing domain, which makes up ~12% of our current practice bank.

42questions here

9free pages

8concepts

8 Concepts in This Objective

Cloud Attack Countermeasures Overview
Identity and Access Management (IAM) Countermeasures
Data Protection Countermeasures
Network Security Countermeasures
Application Security Countermeasures
Monitoring and Logging Countermeasures
Incident Response and Recovery Countermeasures
Compliance and Governance Countermeasures

Questions 21–25

21foundation · easy
Which IAM countermeasure is most effective at mitigating the risk of compromised credentials?
Select an answer first
22application · medium
A company is moving a legacy application to the cloud. The security team wants to implement a layered set of countermeasures to protect against common cloud attacks. Which approach best illustrates defense-in-depth?
Select an answer first
23foundation · easy
To protect data in transit between a user's browser and a cloud application, which countermeasure should be implemented?
Select an answer first
24application · medium
A company's cloud web application was defaced by an attacker who exploited a known vulnerability in the web server software. Which application security countermeasure would have most likely prevented this?
Select an answer first
25application · medium
A company's cloud environment was hit by ransomware that encrypted critical data. The company wants to restore operations quickly and minimize data loss. Which countermeasure is most important?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.