What is the recommended practice for managing privileged access in a cloud environment according to NSA guidance?

Sharing administrative credentials among team members

Using privileged access management (PAM) to control and monitor administrative access

Granting all users administrative privileges to simplify operations

Disabling audit logging for privileged actions

Which of the following is a core security principle emphasized in NSA guidance for cloud environments?

Implementing defense-in-depth with multiple layers of security controls

Disabling all logging to reduce complexity

Using a single strong password for all cloud accounts

Relying solely on the cloud provider for all security controls

A company is moving to the cloud and must meet compliance requirements for data retention. The NSA guidance recommends auditing and monitoring. Which practice best supports compliance?

Store audit logs only in the cloud provider's default location.

Delete audit logs after 30 days to reduce storage costs.

Rely on the cloud provider to manage data retention.

Implement a data retention policy and ensure audit logs are retained for the required period.

What is the recommended approach for protecting data in transit within a cloud environment according to NSA guidance?

Sending data over unencrypted HTTP to reduce latency

Relying on the physical security of the data center for data in transit

Using only application-level encryption and ignoring network-level encryption

Using TLS/SSL encryption for all data transmitted over networks

A company is configuring network security for a cloud environment that includes both on-premises and cloud resources connected via VPN. The security team wants to follow NSA guidance for network security. Which configuration best protects the hybrid environment?

Use only the VPN connection without any additional network security controls.

Allow direct peering between on-premises and each cloud workload to reduce latency.

Disable the VPN and use the public internet for all communication to simplify the network.

Use a hub-and-spoke network topology with centralized firewall inspection for traffic between on-premises and cloud.

EC-CouncilIoT Security Essentials

Domain 5Objective 2

NSA Guidance and Secure Cloud Computing ISE Practice Questions (Page 7)

Part of the Cloud Security and Threat Intelligence domain, which makes up ~18% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 31–35

31foundation · easy
What is the recommended practice for managing privileged access in a cloud environment according to NSA guidance?
Select an answer first
32foundation · easy
Which of the following is a core security principle emphasized in NSA guidance for cloud environments?
Select an answer first
33application · medium
A company is moving to the cloud and must meet compliance requirements for data retention. The NSA guidance recommends auditing and monitoring. Which practice best supports compliance?
Select an answer first
34foundation · easy
What is the recommended approach for protecting data in transit within a cloud environment according to NSA guidance?
Select an answer first
35expert · hard
A company is configuring network security for a cloud environment that includes both on-premises and cloud resources connected via VPN. The security team wants to follow NSA guidance for network security. Which configuration best protects the hybrid environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.