Which network security control is recommended by NSA guidance to protect cloud workloads?

Using a single network security group for all resources

Disabling all firewalls to improve performance

Implementing network segmentation and micro-segmentation

Allowing all inbound traffic from the internet

What is the primary purpose of the NSA's guidance on secure cloud computing?

To mandate the use of a specific commercial cloud provider for all government workloads

To define legal penalties for cloud providers that fail to meet security standards

To provide a set of best practices for federal agencies to adopt cloud services securely

To replace the need for on-premises data centers with cloud-only solutions

A cloud administrator is configuring network security for a new environment. The NSA guidance recommends using network segmentation and monitoring. Which configuration best implements these recommendations?

Create a single subnet and rely on host-based firewalls.

Create separate subnets but disable flow logs to reduce cost.

Create a single large subnet for all resources and enable flow logs.

Create separate subnets for different tiers and enable flow logs for all subnets.

A company must comply with GDPR for data stored in the cloud. The security team needs to ensure that personal data is protected and that audits can be performed. Which measure should they implement?

Store all personal data in a single region and disable audit logging to reduce complexity.

Rely on the cloud provider's GDPR compliance without implementing internal controls.

Enable data encryption and maintain detailed audit logs of access to personal data.

Use only encryption in transit and do not encrypt data at rest.

According to NSA guidance, which principle is essential for maintaining security in a cloud environment?

Implementing least privilege access controls

Minimizing the use of encryption to reduce performance overhead

Avoiding multi-factor authentication to streamline user access

Granting all users administrative privileges to simplify management

EC-CouncilIoT Security Essentials

Domain 5Objective 2

NSA Guidance and Secure Cloud Computing ISE Practice Questions (Page 5)

Part of the Cloud Security and Threat Intelligence domain, which makes up ~18% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 21–25

21foundation · easy
Which network security control is recommended by NSA guidance to protect cloud workloads?
Select an answer first
22foundation · easy
What is the primary purpose of the NSA's guidance on secure cloud computing?
Select an answer first
23application · medium
A cloud administrator is configuring network security for a new environment. The NSA guidance recommends using network segmentation and monitoring. Which configuration best implements these recommendations?
Select an answer first
24application · medium
A company must comply with GDPR for data stored in the cloud. The security team needs to ensure that personal data is protected and that audits can be performed. Which measure should they implement?
Select an answer first
25foundation · easy
According to NSA guidance, which principle is essential for maintaining security in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.