A company recently experienced a data breach due to a misconfigured cloud storage bucket. The security team wants to implement measures to prevent similar incidents. Which of the following are effective preventive measures? Select all that apply.

Disable all logging to reduce the attack surface.

Require all storage buckets to be private by default and only grant access explicitly.

Enable automated scanning tools that detect public buckets and alert the security team.

Use a single, highly privileged account for all administrative tasks.

Use infrastructure as code (IaC) to define storage policies and review them in code reviews.

A company wants to reduce the risk of account hijacking in its cloud environment. Which combination of controls would be most effective?

Use a single administrative account and rotate keys monthly

Encrypt all data and use strong passwords

Restrict network access and disable logging

Enforce multi-factor authentication and monitor for anomalous access patterns

A cloud customer discovers that a storage bucket was left publicly readable, exposing sensitive files. Which cloud threat does this scenario illustrate?

Shared technology vulnerability

A company uses a cloud storage service to host sensitive customer data. An auditor discovers that the storage bucket is publicly readable because the default permission settings were never changed. Which type of cloud threat best describes this situation?

Data breach due to misconfiguration

Shared technology vulnerability

EC-CouncilEthical Hacking Essentials

Domain 8Objective 2

Cloud Computing Threats and Attacks EHE Practice Questions (Page 1)

Part of the Cloud Computing and Penetration Testing domain, which makes up ~12% of our current practice bank.

39questions here

8free pages

4concepts

Questions 1–5

1expert · hard · select all that apply
A company recently experienced a data breach due to a misconfigured cloud storage bucket. The security team wants to implement measures to prevent similar incidents. Which of the following are effective preventive measures? Select all that apply.
Select an answer first
2application · medium
A company wants to reduce the risk of account hijacking in its cloud environment. Which combination of controls would be most effective?
Select an answer first
3foundation · easy
Which cloud security risk arises because multiple customers share the same underlying physical infrastructure, potentially allowing one customer's data to be exposed to another?
Select an answer first
4foundation · easy
A cloud customer discovers that a storage bucket was left publicly readable, exposing sensitive files. Which cloud threat does this scenario illustrate?
Select an answer first
5application · medium
A company uses a cloud storage service to host sensitive customer data. An auditor discovers that the storage bucket is publicly readable because the default permission settings were never changed. Which type of cloud threat best describes this situation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.