What is the primary goal of an incident response plan in a cloud environment?

To minimize damage and recover from security incidents efficiently

To prevent all security incidents from occurring

To identify the root cause of every incident

To ensure compliance with regulatory standards

A development team deploys a web application to the cloud. A penetration test reveals SQL injection vulnerabilities in the application code. Which countermeasure should be prioritized to fix the root cause?

Use parameterized queries in the application code

Restrict database access to the application server only

Deploy a web application firewall (WAF) in front of the application

Enable detailed logging on the database

A company's cloud environment was attacked, and the attacker moved laterally from a public-facing web server to an internal database. Which network countermeasure would have most effectively limited lateral movement?

Enable multi-factor authentication on the database

Enable detailed logging on the database

Segment the network into separate subnets with security groups that restrict traffic between them

Deploy a web application firewall on the web server

A company's cloud environment was breached because a former contractor's credentials were still active. The security team is implementing countermeasures to prevent this from recurring. Which combination of IAM and monitoring controls would most directly address the root cause?

Enable multi-factor authentication for all users and review IAM roles quarterly

Set up a security group that denies all traffic from the contractor's IP range

Require strong password policies and rotate keys every 90 days

Implement automated deprovisioning of accounts upon employee termination and alert on unused credentials

EC-CouncilEthical Hacking Essentials

Domain 8Objective 3

Cloud Attack Countermeasures EHE Practice Questions (Page 7)

Part of the Cloud Computing and Penetration Testing domain, which makes up ~12% of our current practice bank.

42questions here

9free pages

8concepts

8 Concepts in This Objective

Cloud Attack Countermeasures Overview
Identity and Access Management (IAM) Countermeasures
Data Protection Countermeasures
Network Security Countermeasures
Application Security Countermeasures
Monitoring and Logging Countermeasures
Incident Response and Recovery Countermeasures
Compliance and Governance Countermeasures

Questions 31–35

31foundation · easy
What is the primary goal of an incident response plan in a cloud environment?
Select an answer first
32application · medium
A development team deploys a web application to the cloud. A penetration test reveals SQL injection vulnerabilities in the application code. Which countermeasure should be prioritized to fix the root cause?
Select an answer first
33application · medium
A company's cloud environment was attacked, and the attacker moved laterally from a public-facing web server to an internal database. Which network countermeasure would have most effectively limited lateral movement?
Select an answer first
34foundation · easy
Which data protection technique replaces sensitive data with a non-sensitive placeholder that retains the same format and length?
Select an answer first
35application · medium
A company's cloud environment was breached because a former contractor's credentials were still active. The security team is implementing countermeasures to prevent this from recurring. Which combination of IAM and monitoring controls would most directly address the root cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.