Eccouncil Certified Cloud Security Engineer (CCSE) 312-40 Exam Practice Test

Page: 1 / 14
Total 147 questions
Question 1

Two cloud security engineers, Lin and Messy, observed unexpected changes such as slower response time in the behavior of the Azure storage services used by applications. They need to study the tables, queues, and blob logs and identify the root cause of the slow response to remediate the issue. How can both Lin and Messy ensure the operational security of Azure operational?



Answer : D


Question 2

Dustin Hoffman works as a cloud security engineer in a healthcare company. His organization uses AWS cloud- based services. Dustin would like to view the security alerts and security posture across his organization's AWS account. Which AWS service can provide aggregated, organized, and prioritized security alerts from AWS services such as GuardDuty, Inspector, Macie, IAM Analyzer, Systems Manager, Firewall Manager, and AWS Partner Network to Dustin?



Answer : C

AWS Security Hub is designed to provide users with a comprehensive view of their security state within AWS and help them check their environment against security industry standards and best practices.

Here's how AWS Security Hub serves Dustin's needs:

Aggregated View: Security Hub aggregates security alerts and findings from various AWS services such as GuardDuty, Inspector, and Macie.

Organized Data: It organizes and prioritizes these findings to help identify and focus on the most important security issues.

Security Posture: Security Hub provides a comprehensive view of the security posture of AWS accounts, helping to understand the current state of security and compliance.

Automated Compliance Checks: It performs automated compliance checks based on standards and best practices, such as the Center for Internet Security (CIS) AWS Foundations Benchmark.

Integration with AWS Services: Security Hub integrates with other AWS services and partner solutions, providing a centralized place to manage security alerts and automate responses.


AWS's official documentation on Security Hub, which outlines its capabilities for managing security alerts and improving security posture.

An AWS blog post discussing how Security Hub can be used to centralize and prioritize security findings across an AWS environment.

Question 3

Global SciTech Pvt. Ltd. is an IT company that develops healthcare-related software. Using an incident detection system (IDS) and antivirus software, the incident response team of the organization has observed that attackers are targeting the organizational network to gain access to the resources in the on-premises environment. Therefore, their team of cloud security engineers met with a cloud service provider to discuss the various security provisions offered by the cloud service provider. While discussing the security of the organization's virtual machine in the cloud environment, the cloud service provider stated that the Network Security Groups (NSGs) will secure the VM by allowing or denying network traffic to VM instances in a virtual network based on inbound and outbound security rules. Which of the following cloud service provider filters the VM network traffic in a virtual network using NSGs?



Answer : C

Network Security Groups (NSGs) are used in Azure to filter network traffic to and from Azure resources within an Azure Virtual Network (VNet). NSGs contain security rules that allow or deny inbound and outbound network traffic based on several parameters such as protocol, source and destination IP address, port number, and direction (inbound or outbound).

NSG Functionality: NSGs function as a firewall for VM instances, controlling both inbound and outbound traffic at the network interface, VM, and subnet level1.

Security Rules: They consist of security rules that specify source and destination, port, and protocol to filter traffic1.

Traffic Control: By setting appropriate rules, NSGs help secure VMs from unauthorized access and ensure that only allowed traffic can flow to and from the VM1.

Azure Specific: This feature is specific to Azure and is not offered by IBM, AWS, or Google Cloud in the same manner1.

Reference: NSGs are a key component of Azure's networking capabilities, providing a way to control access to VMs, services, and subnets, and are an integral part of Azure's security infrastructure1.


Question 4

Andrew Gerrard has been working as a cloud security engineer in an MNC for the past 3 years. His organization uses cloud-based services and it has implemented a DR plan. Andrew wants to ensure that the DR plan works efficiently and his organization can recover and continue with its normal operation when a disaster strikes.

Therefore, the owner of the DR plan, Andrew, and other team members involved in the development and implementation of the DR plan examined it to determine the inconsistencies and missing elements. Based on the given scenario, which of the following type of DR testing was performed in Andrew's organization?



Answer : A

Disaster Recovery (DR) Testing: DR testing is a critical component of a disaster recovery plan (DRP). It ensures that the plan is effective and can be executed in the event of a disaster1.

Plan Review: A plan review is a type of DR testing where stakeholders involved in the development and implementation of the DRP closely examine the plan to identify any inconsistencies or missing elements1.

Purpose of Plan Review: The goal of a plan review is to ensure that the DRP is comprehensive, up-to-date, and capable of being implemented as intended. It involves a thorough examination of the plan's components1.

Scenario in Questio n : In the scenario described, Andrew Gerrard and his team are reviewing their DRP to determine inconsistencies and missing elements. This aligns with the activities involved in a plan review1.

Exclusion of Other Options: While simulation tests and table-top exercises are also types of DR testing, they involve more active testing of the DRP's procedures. Since the scenario specifically mentions examining the plan for inconsistencies and missing elements, it indicates a plan review rather than a simulation or exercise1.


LayerLogix's article on Disaster Recovery Testing in 20231.

Question 5

Global InfoSec Solution Pvt. Ltd. is an IT company that develops mobile-based software and applications. For smooth, secure, and cost-effective facilitation of business, the organization uses public cloud services. Now, Global InfoSec Solution Pvt. Ltd. is encountering a vendor lock-in issue. What is vendor lock-in in cloud computing?



Answer : D

Dependency: The customer relies heavily on the services, technologies, or platforms provided by one cloud service provider.

Switching Costs: If the customer wants to switch providers, they may encounter substantial costs related to data migration, retraining staff, and reconfiguring applications to work with the new provider's platform.

Business Disruption: The process of switching can lead to business disruptions, as it may involve downtime or a learning curve for new services.

Strategic Considerations: Vendor lock-in can also limit the customer's ability to negotiate better terms or take advantage of innovations and price reductions from competing providers.

Reference: Vendor lock-in is a well-known issue in cloud computing, where customers may find it difficult to move databases or services due to high costs or technical incompatibilities. This can result from using proprietary technologies or services that are unique to a particular cloud provider12. It is important for organizations to consider the potential for vendor lock-in when choosing cloud service providers and to plan accordingly to mitigate these risks1.


Question 6

SecAppSol Pvt. Ltd. is a cloud software and application development company located in Louisville, Kentucky. The security features provided by its previous cloud service provider was not satisfactory, and in 2012, the organization became a victim of eavesdropping. Therefore, SecAppSol Pvt. Ltd. changed its cloud service provider and adopted AWS cloud-based services owing to its robust and cost-effective security features. How does SecAppSol Pvt. Ltd.'s security team encrypt the traffic between the load balancer and client that initiate

SSL or TLS sessions?



Answer : B

To encrypt the traffic between the load balancer and clients that initiate SSL or TLS sessions, SecAppSol Pvt. Ltd.'s security team would enable an HTTPS listener on their load balancer. This is a common method used in AWS to secure communication.

Here's how it works:

HTTPS Listener Configuration: The security team configures the load balancer with an HTTPS listener, which listens for incoming SSL or TLS connections on a specified port (usually port 443).

SSL/TLS Certificates: They deploy SSL/TLS certificates on the load balancer. These certificates are used to establish a secure connection and encrypt the traffic.

Secure Communication: When a client initiates a session, the HTTPS listener uses the SSL/TLS certificate to perform a handshake, establish a secure connection, and encrypt the data in transit.

Backend Encryption: Optionally, the load balancer can also be configured to encrypt traffic to the backend servers, ensuring end-to-end encryption.

Security Policies: The security team sets security policies on the load balancer to define the ciphers and protocols used for SSL/TLS, further enhancing security.


AWS documentation on configuring end-to-end encryption in a load-balanced environment, which includes setting up an HTTPS listener1.

AWS documentation on creating an HTTPS listener for your Application Load Balancer, detailing the process and requirements2.

Question 7

Maria Howell has been working as a senior cloud security engineer in an loT manufacturing company. Her organization designs, develops, and tests loT devices. It uses Microsoft Azure cloud-based services. Maria had no knowledge of data science and the various ML and Al models used for data analysis, but she would like to analyze the time-series data generated from loT devices to monitor and identify abnormalities. Which of the following is an Al-based Azure service that can help Maria in monitoring and identifying the abnormalities in time series data without requiring any knowledge of machine learning?



Answer : B


Page:    1 / 14   
Total 147 questions