Which of the following best describes the core principle of the shared responsibility model in cloud security?

The customer is responsible for all security aspects, including physical infrastructure.

Security responsibilities are transferred entirely to third-party auditors.

Security responsibilities are divided between the provider and the customer based on the service model.

The cloud provider is responsible for all security aspects, including customer data.

A company operates a cloud-based IoT platform that must remain highly available. The security team wants to implement a control that detects unauthorized access to the management API. However, the team is concerned that the control might generate false positives and disrupt operations. Which approach best balances detection and operational continuity?

Block all API access from unknown IP addresses immediately.

Implement a manual review of all API access logs once a month.

Disable the management API during off-peak hours to reduce exposure.

Enable detailed audit logging and configure alerts based on anomaly detection with a defined threshold.

A cloud security team receives a threat intelligence alert about a new botnet targeting cloud management consoles. The team wants to implement a control that reduces the attack surface without disrupting legitimate administrative access. Which control is most appropriate?

Disable the management console until the botnet is no longer active.

Increase the logging level for the console and review logs weekly.

Move the management console to a different cloud provider.

Restrict management console access to approved IP ranges and require multi-factor authentication.

EC-CouncilIoT Security Essentials

Domain 5Objective 1

Cloud Security and Cloud Vulnerabilities ISE Practice Questions (Page 1)

Part of the Cloud Security and Threat Intelligence domain, which makes up ~18% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

5concepts

Questions 1–5

1application · easy
A security team wants to implement a control that automatically terminates a compromised cloud resource when an anomaly is detected. Which type of control does this represent?
Select an answer first
2application · medium
A healthcare startup uses a cloud object storage service to store IoT sensor data. After a security review, the team discovers that the storage bucket is publicly readable due to a misconfigured access control list. Which type of cloud vulnerability does this represent?
Select an answer first
3foundation · easy
Which of the following best describes the core principle of the shared responsibility model in cloud security?
Select an answer first
4expert · hard
A company operates a cloud-based IoT platform that must remain highly available. The security team wants to implement a control that detects unauthorized access to the management API. However, the team is concerned that the control might generate false positives and disrupt operations. Which approach best balances detection and operational continuity?
Select an answer first
5application · medium
A cloud security team receives a threat intelligence alert about a new botnet targeting cloud management consoles. The team wants to implement a control that reduces the attack surface without disrupting legitimate administrative access. Which control is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

Cloud Security and Cloud Vulnerabilities ISE Practice Questions (Page 1)

Questions 1–5

A security team wants to implement a control that automatically terminates a compromised cloud resource when an anomaly is detected. Which type of control does this represent?

A healthcare startup uses a cloud object storage service to store IoT sensor data. After a security review, the team discovers that the storage bucket is publicly readable due to a misconfigured access control list. Which type of cloud vulnerability does this represent?

Which of the following best describes the core principle of the shared responsibility model in cloud security?

A cloud security team receives a threat intelligence alert about a new botnet targeting cloud management consoles. The team wants to implement a control that reduces the attack surface without disrupting legitimate administrative access. Which control is most appropriate?

Keep studying — Cloud Security and Threat Intelligence