An organization is required by law to keep certain data on-premises, but they want to use cloud services for development and testing. They also want to ensure that the development data does not accidentally include production data. Which deployment model and control is most appropriate?

Community cloud with shared governance

Hybrid cloud with data classification and DLP policies

Which statement best describes the shared responsibility model in cloud computing?

Security responsibilities are split between the provider and customer, with the exact split varying by service model.

The customer is responsible for all security controls except for network firewalls.

The cloud provider is responsible for securing everything, including customer data and applications.

The customer is responsible for securing the physical infrastructure and hypervisor.

A security auditor is reviewing a container environment and finds that the container runtime is running as root on the host, and containers can be started with the --privileged flag. What is the primary risk of this configuration?

A compromised container could gain full access to the host kernel and devices

Containers will have limited CPU and memory

The container images will be vulnerable to malware

Containers will be unable to access the network

A security team is hardening a container host. They want to reduce the risk of container breakout. Which combination of measures is most effective?

Use the latest container runtime and disable SELinux

Run containers in privileged mode for better performance

Expose the Docker socket to the container for management

Run containers with read-only root filesystems, drop all capabilities, and use seccomp profiles

A company is moving its on-premises infrastructure to a cloud provider. The security team is concerned about who is responsible for patching the operating system of their virtual machines. According to the shared responsibility model, who is responsible for patching the guest OS?

Both the provider and the customer

It depends on the deployment model

EC-CouncilEthical Hacking Essentials

Domain 8Objective 1

Cloud Computing and Containerization Concepts EHE Practice Questions (Page 3)

Part of the Cloud Computing and Penetration Testing domain, which makes up ~12% of our current practice bank.

40questions here

8free pages

6concepts

Questions 11–15

11expert · hard
An organization is required by law to keep certain data on-premises, but they want to use cloud services for development and testing. They also want to ensure that the development data does not accidentally include production data. Which deployment model and control is most appropriate?
Select an answer first
12foundation · easy
Which statement best describes the shared responsibility model in cloud computing?
Select an answer first
13application · medium
A security auditor is reviewing a container environment and finds that the container runtime is running as root on the host, and containers can be started with the --privileged flag. What is the primary risk of this configuration?
Select an answer first
14expert · hard
A security team is hardening a container host. They want to reduce the risk of container breakout. Which combination of measures is most effective?
Select an answer first
15application · medium
A company is moving its on-premises infrastructure to a cloud provider. The security team is concerned about who is responsible for patching the operating system of their virtual machines. According to the shared responsibility model, who is responsible for patching the guest OS?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.