Which architectural practice is recommended by NSA guidance for securing cloud infrastructure?

Relying on a single firewall at the perimeter for all traffic

Placing all resources in a single network segment for simplicity

Using micro-segmentation to isolate workloads and limit lateral movement

Exposing management interfaces directly to the internet for ease of access

Which IAM control is emphasized in NSA guidance to protect cloud accounts?

Disabling password complexity requirements

Using shared accounts for administrative tasks

Granting permanent administrative access to all users

Implementing multi-factor authentication (MFA) for all users

A company is migrating to the cloud and must balance security with operational efficiency. The security team wants to follow NSA principles but is concerned about user productivity. Which approach best balances security and usability?

Implement MFA and least-privilege access, but provide a streamlined approval process for temporary elevated access.

Grant all users broad access to avoid delays and rely on monitoring to detect misuse.

Implement strict access controls with no exception process, requiring all access changes to go through a lengthy review.

Disable MFA to reduce login friction and use strong passwords instead.

A cloud administrator is configuring network security for a hybrid cloud environment. The NSA guidance recommends securing the connection between on-premises and cloud. Which configuration is most aligned?

Use a dedicated connection but do not encrypt it.

Use a VPN with strong encryption and restrict access to specific IP ranges.

Use a VPN but allow all traffic from any IP address.

Use a direct internet connection without encryption.

A company uses a cloud-based identity provider and wants to enforce NSA-recommended identity and access management controls. Which control is most important to implement?

Enforce multi-factor authentication (MFA) for all users, especially administrators.

Disable account lockout policies to avoid user frustration.

Use simple passwords and change them every 90 days.

Grant all users the same permissions to simplify management.

EC-CouncilIoT Security Essentials

Domain 5Objective 2

NSA Guidance and Secure Cloud Computing ISE Practice Questions (Page 6)

Part of the Cloud Security and Threat Intelligence domain, which makes up ~18% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 26–30

26foundation · easy
Which architectural practice is recommended by NSA guidance for securing cloud infrastructure?
Select an answer first
27foundation · easy
Which IAM control is emphasized in NSA guidance to protect cloud accounts?
Select an answer first
28expert · hard
A company is migrating to the cloud and must balance security with operational efficiency. The security team wants to follow NSA principles but is concerned about user productivity. Which approach best balances security and usability?
Select an answer first
29application · medium
A cloud administrator is configuring network security for a hybrid cloud environment. The NSA guidance recommends securing the connection between on-premises and cloud. Which configuration is most aligned?
Select an answer first
30application · medium
A company uses a cloud-based identity provider and wants to enforce NSA-recommended identity and access management controls. Which control is most important to implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.