TeratInfo Pvt. Ltd. is an IT company that develops software products and applications for financial organizations. Owing to the cost-effective storage features and robust services provided by cloud computing, TeratInfo Pvt. Ltd. adopted cloud-based services. Recently, its security team observed a dip in the organizational system performance. Susan, a cloud security engineer, reviewed the list of publicly accessible resources, security groups, routing tables, ACLs, subnets, and IAM policies. What is this process called?

Performing cloud reconnaissance

Checking audit and evidence-gathering features in the cloud service

Checking for the right implementation of security management

Testing for virtualization management security

Performing cloud reconnaissance

Rebecca Mader has been working as a cloud security engineer in an IT company located in Detroit, Michigan. Her organization uses AWS cloud-based services. An application is launched by a developer on an EC2 instance that needs access to the S3 bucket (photos). Rebecca created a get-pics service role and attached it to the EC2 instance. This service role comprises a permission policy that allows read-only access to the S3 bucket and a trust policy that allows the instance to assume the role and retrieve temporary credentials. The application uses the temporary credentials of the role to access the photo bucket when it runs on the instance. Does the developer need to share or manage credentials or does the admin need to grant permission to the developer to access the photo bucket?

No, the developer never has to share or manage credentials and the admin does not have to grant permission to the developer to access the photo bucket

No, the developer never has to share or manage credentials, but the admin has to grant permission to the developer to access the photo bucket

Yes, the developer has to share or manage credentials, but the admin does not have to grant permission to the developer to access the photo bucket

Yes, the developer should share or manage credentials and the admin should grant permission to the developer to access the photo bucket

No, the developer never has to share or manage credentials and the admin does not have to grant permission to the developer to access the photo bucket

Kelsey Lewis has been working as a cloud security engineer in a BPO company that provides 24-7 customer service. Owing to the cost-effective storage and security features provided by cloud computing, her organization adopted the cloud environment 4 years ago. Kelsey implemented the TLS protocol to provide security to e-mail communications, voice over IP (VoIP) communication, web traffic, messaging clients, file transfers, and internet services [Domain Name Service (DNS) and Network Time Protocol (NTP)). Which certificate is used by TLS for communication authentication and encryption between hosts?

X.509 certificates issued by the Certificate Authority

X.507 certificates issued by the Certificate Authority

X.508 certificates issued by the Certificate Authority

X.506 certificate issued by the Certificate Authority

X.509 certificates issued by the Certificate Authority

Gabriel Bateman has been working as a cloud security engineer in an IT company for the past 5 years. Owing to the recent onset of the COVID-19 pandemic, his organization has given the provision to work from home to all employees. Gabriel's organization uses Microsoft Office 365 that allows all employees access files, emails, and other Office programs securely from various locations on multiple devices. Who among the following is responsible for patch management in Microsoft Office 365?

Microsoft is entirely responsible for patch management

Both Gabriel's organization and Microsoft share responsibilities for patch management

Gabriel's organization should outsource patch management to a third party

Gabriel's organization is entirely responsible for patch management

Microsoft is entirely responsible for patch management

Richard Harris works as a senior cloud security engineer in a multinational company. His organization uses Microsoft Azure cloud-based services. Richard would like to manage, control, and monitor the access to important resources in his organization. Which service in Azure AD can enable Richard to manage, control, and monitor the access to resources in Azure. Azure AD. and other Microsoft online services such as Microsoft Intune or Microsoft 365?

System for Cross-Domain Identity Management

SeaCloud Soft Pvt. Ltd. is an IT company that develops software and applications related to the healthcare industry. To safeguard the data and applications against The organization did not trust the cloud service attackers, the organization adopted cloud computing. provider; therefore, it Implemented an encryption technique that secures data during communication and storage. SeaCloud Soft Pvt. Ltd. performed computation on the encrypted data and then sent the data to the cloud service provider. Based on the given information, which of the following encryption techniques was implemented by SeaCloud Soft Pvt. Ltd.?

Ciphertext attribute based encryption

Key policy attribute-based encryption

Alex Hales works as a cloud security specialist in an IT company. He wants to make his organization's business faster and more efficient by implementing Security Assertion Mark-up Language (SAML) that will enable employees to securely access multiple cations with a single set of credentials. What is SAML?

It is a XML based authentication and authorization standard

It is a YAML-based authentication and authorization standard

It is an HTML based authentication and authorization standard

It is a XML based authentication and authorization standard

It is a JSON based authentication and authorization standard

Ocular Private Ltd. is an IT company that develops software related to graphic design. The organization has been using Google cloud services. Margot Robbie has been working as a cloud security engineer in Ocular Private Ltd. over the past three years. She uses the CCP Cloud Operations Suite (formerly Stack Driver} logging and monitoring tool to monitor and debug CCP hosted applications. Margot would like to monitor a compute engine instance with cloud monitoring; therefore, she created a compute engine instance, then she installed the cloud monitoring agent. Which of the following command can Margot use to start the cloud monitoring agent?

sudo service stackdriver-agent start

sudo service stackdriver.agent start

An Azure subscription owner, Arial Solutions, gets notified by Microsoft (by default} when a high-severity alert (email notification) is triggered. The cloud security engineer would like to send these security alerts to a specific Individual or anyone with particular Azure roles for a subscription, and modify the severity levels for which alerts are sent. How con the cloud security engineer configure these alerts?

By setting ASC security contact

By exporting ASC alerts using the Export Feature

By using ASC Data Connector to stream alerts to Azure Sentinel

By setting ASC security contact

For securing data, an AWS customer created a key in the Alabama region to encrypt their data in the California region. Two users were added to the key along with an external AWS account. When the AWS customer attempted to encrypt an S3 object, they observed that the key is not listed. What is the reason behind this?

Encryption key should be in the same region

It takes time for new keys to be listed

Encryption key should be in the same region

S3 cannot be integrated with KMS

AWS does not support external AWS accounts

TechGloWorld is an IT company that develops cybersecurity software and applications for various customers across the globe. Owing to the cost-effective security and storage services provided by AWS. TechGloWorld has adopted AWS cloud-based services. A new employee, named Tom Harrison, has joined TechGloWorld as a cloud security engineer. The team leader of cloud security engineers would like to add an 1AM user named Tom to the 1AM group named Admins. Which of the following commands should be used by the TechGloWorld security team leader?

aws iam add-user-to-group ---user-name Tom ---group-name Admins

aws iam --group-name Admins -user-name Tom add-user-to-group

aws iam ---group-name Admins ---user-name Tarn-add-user-to-group

aws iam add-user-to-group ---user-name Tom ---group-name Admins

aws iam add-user-to-group ---user-name Torn ---group-name Admin

Ryan has worked as a senior cloud security engineer over the past five years in an IT company. His organization uses Google cloud-based services because it provides live migration of VM. improved performance, robust security, better pricing compared to competitors. Ryan is using Cloud Endpoints to protect and manage APIs. Using Cloud Endpoints, ho is controlling access to APIs and validating every call with web tokens and Google API keys. Which of the following web tokens can validate every call in Cloud Endpoints?

XML organization uses Google cloud-based services

ECCouncil 312-40 Practice Test 4 - Free Online Exam Questions 121-150

GlobalCloud is a cloud service provider that offers various cloud-based secure and cost-effective services to cloud consumers. The customer base of this organization increased within a short period; thus, external auditing was performed on GlobalCloud. The auditor used spreadsheets, databases, and data analyzing software to analyze a large volume of data. Based on the given information, which cloud-based audit method was used by the auditor to collect the objective evidence?

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 312-40 Practice Test 4

Question

ECCouncil 312-40 Practice Tests

Practice Tests