Which of the following is a typical source of threat intelligence used to protect cloud environments?

Cloud provider security bulletins

The organization's marketing department

The cloud provider's billing system

A startup deploys a containerized IoT analytics platform on a public cloud. The security team discovers that the container registry is publicly accessible and that several containers run with root privileges. Which combination of actions best addresses the immediate vulnerabilities while aligning with the shared responsibility model?

Restrict registry access to authorized identities and enforce least-privilege container configurations.

Enable a web application firewall on the registry and rely on the provider's default container runtime security.

Move all container workloads to a private cloud to eliminate public exposure.

Ask the cloud provider to harden the container images and registry access on behalf of the customer.

A security operations center (SOC) receives a threat intelligence report about a new malware strain that targets cloud storage services. The report includes indicators of compromise (IOCs) such as file hashes and command-and-control (C2) domains. The SOC wants to use this intelligence to protect its cloud environment. Which action is most effective?

Share the report with other organizations but take no further action.

Deploy the IOCs to the cloud security monitoring tools and correlate them with current telemetry.

Block all traffic to the C2 domains at the network level.

Wait for the cloud provider to issue a patch for the malware.

EC-CouncilIoT Security Essentials

Domain 5Objective 1

Cloud Security and Cloud Vulnerabilities ISE Practice Questions (Page 5)

Part of the Cloud Security and Threat Intelligence domain, which makes up ~18% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

5concepts

Questions 21–25

21foundation · easy
Which of the following is a typical source of threat intelligence used to protect cloud environments?
Select an answer first
22application · medium
A cloud security team subscribes to a threat intelligence service that provides real-time alerts about emerging malware campaigns. The team uses this information to update their intrusion detection system (IDS) signatures. Which phase of the threat intelligence lifecycle does this represent?
Select an answer first
23application · medium
A startup deploys a containerized IoT analytics platform on a public cloud. The security team discovers that the container registry is publicly accessible and that several containers run with root privileges. Which combination of actions best addresses the immediate vulnerabilities while aligning with the shared responsibility model?
Select an answer first
24expert · hard
A security operations center (SOC) receives a threat intelligence report about a new malware strain that targets cloud storage services. The report includes indicators of compromise (IOCs) such as file hashes and command-and-control (C2) domains. The SOC wants to use this intelligence to protect its cloud environment. Which action is most effective?
Select an answer first
25foundation · easy
Which governance framework provides a structured approach to managing information security risks and aligning security with business objectives?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

Cloud Security and Cloud Vulnerabilities ISE Practice Questions (Page 5)

Questions 21–25

Which of the following is a typical source of threat intelligence used to protect cloud environments?

A cloud security team subscribes to a threat intelligence service that provides real-time alerts about emerging malware campaigns. The team uses this information to update their intrusion detection system (IDS) signatures. Which phase of the threat intelligence lifecycle does this represent?

Which governance framework provides a structured approach to managing information security risks and aligning security with business objectives?

Keep studying — Cloud Security and Threat Intelligence