A small business is moving its IT infrastructure to the cloud and has limited security expertise. The owner wants to understand the scope of NSA guidance for secure cloud computing. What should the owner know about this guidance?

It applies only to government agencies and is not relevant to private businesses.

It focuses exclusively on network security and does not address data protection or identity management.

It is a mandatory legal requirement that all cloud providers must follow, with penalties for non-compliance.

It provides a framework of security principles and best practices applicable to cloud environments, including architecture, data protection, and identity management.

A company is preparing for potential cloud security incidents. The NSA guidance emphasizes the importance of having a well-defined incident response process. Which step is most critical to include in the plan?

Wait for the cloud provider to detect and report all incidents.

Define roles and responsibilities for the incident response team.

Focus only on containment and do not perform root cause analysis.

Delete all logs after an incident to protect privacy.

A company's cloud environment has experienced a security incident involving a compromised administrative account. The incident response team needs to contain the breach and preserve evidence. According to NSA guidance, what should be the first step?

Rebuild the entire cloud environment from scratch without investigating the root cause.

Notify all employees and ask them to change their passwords before taking any other action.

Delete the compromised account and all associated logs to prevent further damage.

Disable the compromised account and snapshot the affected resources for forensic analysis.

What is the purpose of using a web application firewall (WAF) in a cloud environment as per NSA guidance?

To protect web applications from common attacks such as SQL injection and cross-site scripting

To replace the need for network segmentation

To encrypt all data stored in the cloud

To manage user identities and access permissions

Which data protection measure is specifically recommended by NSA guidance for data stored in the cloud?

Storing all data in plaintext to facilitate access

Relying on the cloud provider to encrypt data without customer control

Encrypting data at rest using strong encryption algorithms

Using only network-level encryption and not encrypting stored data

EC-CouncilIoT Security Essentials

Domain 5Objective 2

NSA Guidance and Secure Cloud Computing ISE Practice Questions (Page 4)

Part of the Cloud Security and Threat Intelligence domain, which makes up ~18% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 16–20

16application · medium
A small business is moving its IT infrastructure to the cloud and has limited security expertise. The owner wants to understand the scope of NSA guidance for secure cloud computing. What should the owner know about this guidance?
Select an answer first
17application · medium
A company is preparing for potential cloud security incidents. The NSA guidance emphasizes the importance of having a well-defined incident response process. Which step is most critical to include in the plan?
Select an answer first
18application · medium
A company's cloud environment has experienced a security incident involving a compromised administrative account. The incident response team needs to contain the breach and preserve evidence. According to NSA guidance, what should be the first step?
Select an answer first
19foundation · easy
What is the purpose of using a web application firewall (WAF) in a cloud environment as per NSA guidance?
Select an answer first
20foundation · easy
Which data protection measure is specifically recommended by NSA guidance for data stored in the cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.