A security team is designing a container security program. They have limited budget and need to prioritize controls. Which control provides the most significant risk reduction for the least effort?

Deploy a runtime security agent on every node

Use a service mesh for mutual TLS

Implement network policies to segment container traffic

Implement image scanning and signing in the CI/CD pipeline

A development team wants to package a microservice with its dependencies so it runs identically in development, staging, and production. They need to isolate the process from other services on the same host but do not want the overhead of a full operating system per service. Which technology should they use?

Virtual machines with a hypervisor

A platform team is deploying a Kubernetes cluster and wants to ensure that containers cannot access the host's network namespace or mount sensitive host directories. Which security measure should they implement?

Use a Pod Security Policy or admission controller to restrict privileged containers and host mounts

Use resource quotas for each namespace

Enable network policies to restrict pod-to-pod communication

Run containers with a read-only root filesystem

A company is migrating a legacy application to the cloud. The application requires a specific operating system version and custom kernel modules. They also need to maintain full control over the network configuration. Which service model and responsibility split should they choose?

PaaS, where the provider manages the OS and the customer manages the network

IaaS, where the customer manages the OS and network, and the provider manages the physical infrastructure

SaaS, where the provider manages everything

FaaS, where the customer manages the runtime

EC-CouncilEthical Hacking Essentials

Domain 8Objective 1

Cloud Computing and Containerization Concepts EHE Practice Questions (Page 5)

Part of the Cloud Computing and Penetration Testing domain, which makes up ~12% of our current practice bank.

40questions here

8free pages

6concepts

Questions 21–25

21expert · hard
A security team is designing a container security program. They have limited budget and need to prioritize controls. Which control provides the most significant risk reduction for the least effort?
Select an answer first
22foundation · easy
A government agency must meet strict data-residency requirements and wants exclusive use of its cloud infrastructure, but it also wants to avoid building its own data center. Which deployment model best fits this requirement?
Select an answer first
23application · medium
A development team wants to package a microservice with its dependencies so it runs identically in development, staging, and production. They need to isolate the process from other services on the same host but do not want the overhead of a full operating system per service. Which technology should they use?
Select an answer first
24application · medium
A platform team is deploying a Kubernetes cluster and wants to ensure that containers cannot access the host's network namespace or mount sensitive host directories. Which security measure should they implement?
Select an answer first
25expert · hard
A company is migrating a legacy application to the cloud. The application requires a specific operating system version and custom kernel modules. They also need to maintain full control over the network configuration. Which service model and responsibility split should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Cloud Computing and Containerization Concepts EHE Practice Questions (Page 5)

Questions 21–25

A security team is designing a container security program. They have limited budget and need to prioritize controls. Which control provides the most significant risk reduction for the least effort?

A government agency must meet strict data-residency requirements and wants exclusive use of its cloud infrastructure, but it also wants to avoid building its own data center. Which deployment model best fits this requirement?

A platform team is deploying a Kubernetes cluster and wants to ensure that containers cannot access the host's network namespace or mount sensitive host directories. Which security measure should they implement?

A company is migrating a legacy application to the cloud. The application requires a specific operating system version and custom kernel modules. They also need to maintain full control over the network configuration. Which service model and responsibility split should they choose?

Keep studying — Cloud Computing and Penetration Testing