A manufacturing company migrates its IoT device management platform to a public cloud IaaS environment. The security team is defining responsibilities for patching the operating system of the virtual machines that host the platform. According to the shared responsibility model, which party is responsible for applying OS patches?

Both parties share equal responsibility for patching the guest OS

The cloud provider, because it manages the hypervisor and physical infrastructure

The IoT device manufacturer, because it supplies the devices that connect to the platform

The customer, because the VMs are customer-managed resources in IaaS

Which of the following is a common cloud vulnerability that arises from inadequate authentication or authorization in cloud services?

Data loss due to hardware failure

Misconfigured network firewalls

A cloud security team is considering whether to share threat intelligence with other organizations in the same industry. The team is concerned about exposing sensitive information about its own vulnerabilities. Which approach best balances intelligence sharing and confidentiality?

Share all threat intelligence data without any restrictions.

Refuse to share any threat intelligence to protect confidentiality.

Share only with competitors to avoid leaking to the public.

Share anonymized indicators and tactics, techniques, and procedures (TTPs) while withholding sensitive internal details.

EC-CouncilIoT Security Essentials

Domain 5Objective 1

Cloud Security and Cloud Vulnerabilities ISE Practice Questions (Page 6)

Part of the Cloud Security and Threat Intelligence domain, which makes up ~18% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

5concepts

Questions 26–30

26application · medium
A manufacturing company migrates its IoT device management platform to a public cloud IaaS environment. The security team is defining responsibilities for patching the operating system of the virtual machines that host the platform. According to the shared responsibility model, which party is responsible for applying OS patches?
Select an answer first
27application · medium
A cloud service provider wants to assure its customers that its security controls are independently audited. Which certification or attestation would best demonstrate this?
Select an answer first
28foundation · easy
Which of the following is a common cloud vulnerability that arises from inadequate authentication or authorization in cloud services?
Select an answer first
29application · medium
A cloud-based IoT service processes personal data of EU citizens. The company must ensure that data transfers outside the EU are lawful. Which compliance framework is most directly relevant?
Select an answer first
30expert · hard
A cloud security team is considering whether to share threat intelligence with other organizations in the same industry. The team is concerned about exposing sensitive information about its own vulnerabilities. Which approach best balances intelligence sharing and confidentiality?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

Cloud Security and Cloud Vulnerabilities ISE Practice Questions (Page 6)

Questions 26–30

A cloud service provider wants to assure its customers that its security controls are independently audited. Which certification or attestation would best demonstrate this?

Which of the following is a common cloud vulnerability that arises from inadequate authentication or authorization in cloud services?

A cloud-based IoT service processes personal data of EU citizens. The company must ensure that data transfers outside the EU are lawful. Which compliance framework is most directly relevant?

A cloud security team is considering whether to share threat intelligence with other organizations in the same industry. The team is concerned about exposing sensitive information about its own vulnerabilities. Which approach best balances intelligence sharing and confidentiality?

Keep studying — Cloud Security and Threat Intelligence