A cloud security engineer notices that a misconfigured storage bucket allowed public read access to IoT device telemetry for several days. The engineer wants to implement controls to prevent recurrence and detect future misconfigurations. Which combination of controls is most appropriate?

Move the telemetry data to a private cloud to avoid public exposure.

Enforce bucket policies that deny public access and enable continuous compliance scanning.

Rotate access keys weekly and enable multi-factor authentication for all users.

Increase the logging level and review logs monthly.

A cloud security analyst is reviewing a threat intelligence report that lists a common vulnerability in IoT device management APIs. The analyst wants to determine whether the organization's cloud environment is exposed. Which action is most effective?

Compare the organization's API configuration and version against the indicators and remediation guidance in the report.

Ignore the report because threat intelligence reports are only for on-premises systems.

Deploy a new API gateway without checking the current configuration.

Block all external access to the API until the report is updated.

A multinational corporation uses a public cloud provider to host IoT applications. The provider has data centers in multiple regions. To comply with data residency requirements, the company must ensure that customer data is stored only in a specific country. What is the most appropriate cloud deployment approach?

Encrypt all data to avoid residency requirements

Use a hybrid cloud with data replicated to multiple regions

Use a private cloud hosted on-premises

Select a cloud region located in the required country

EC-CouncilIoT Security Essentials

Domain 5Objective 1

Cloud Security and Cloud Vulnerabilities ISE Practice Questions (Page 7)

Part of the Cloud Security and Threat Intelligence domain, which makes up ~18% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

5concepts

Questions 31–35

31application · medium
A cloud security engineer notices that a misconfigured storage bucket allowed public read access to IoT device telemetry for several days. The engineer wants to implement controls to prevent recurrence and detect future misconfigurations. Which combination of controls is most appropriate?
Select an answer first
32application · medium
A company must demonstrate to an auditor that it has implemented specific security controls for its cloud-based IoT platform. The auditor asks for evidence of access reviews and vulnerability scans. Which type of control evidence is the auditor requesting?
Select an answer first
33foundation · easy
Which type of security control is designed to stop a security incident from occurring in the first place?
Select an answer first
34application · medium
A cloud security analyst is reviewing a threat intelligence report that lists a common vulnerability in IoT device management APIs. The analyst wants to determine whether the organization's cloud environment is exposed. Which action is most effective?
Select an answer first
35application · medium
A multinational corporation uses a public cloud provider to host IoT applications. The provider has data centers in multiple regions. To comply with data residency requirements, the company must ensure that customer data is stored only in a specific country. What is the most appropriate cloud deployment approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

Cloud Security and Cloud Vulnerabilities ISE Practice Questions (Page 7)

Questions 31–35

A cloud security engineer notices that a misconfigured storage bucket allowed public read access to IoT device telemetry for several days. The engineer wants to implement controls to prevent recurrence and detect future misconfigurations. Which combination of controls is most appropriate?

A company must demonstrate to an auditor that it has implemented specific security controls for its cloud-based IoT platform. The auditor asks for evidence of access reviews and vulnerability scans. Which type of control evidence is the auditor requesting?

Which type of security control is designed to stop a security incident from occurring in the first place?

A cloud security analyst is reviewing a threat intelligence report that lists a common vulnerability in IoT device management APIs. The analyst wants to determine whether the organization's cloud environment is exposed. Which action is most effective?

Keep studying — Cloud Security and Threat Intelligence