312-40v2 Exam - Free ECCouncil Questions and Answers

Question #1 (Topic: Exam A)

Cindy Williams has been working as a cloud security engineer in an IT company situated in Austin, Texas. Owing to the robust security and cost-effective features provided by AWS, her organization adopted AWS cloud-based services. Cindy has deployed an application in the Amazon Elastic Compute Cloud (EC2) instance. Which of the following cloud computing service model does the Amazon EC2 instance represent?

A. SaaS B. DaaS C. PaaS D. IaaS

Answer: D

Question #2 (Topic: Exam A)

The TCK Bank adopts cloud for storing the private data of its customers. The bank usually explains its information sharing practices to its customers and safeguards sensitive data. However, there exist some security loopholes in its information sharing practices. Therefore, hackers could steal the critical data of the bank’s customers. In this situation, under which cloud compliance framework will the bank be penalized?

A. ITAR B. GLBA C. NIST D. GDPR

Answer: B

Question #3 (Topic: Exam A)

Tom Holland works as a cloud security engineer in an IT company located in Lansing, Michigan. His organization has adopted cloud-based services wherein user access, application, and data security are the responsibilities of the organization, and the OS, hypervisor, physical, infrastructure, and network security are the responsibilities of the cloud service provider. Based on the aforementioned cloud security shared responsibilities, which of the following cloud computing service models is enforced in Tom’s organization?

A. Software-as-a-Service B. On-Premises C. Infrastructure-as-a-Service D. Platform-as-a-Service

Answer: C

Question #4 (Topic: Exam A)

An organization, PARADIGM PlayStation, moved its infrastructure to a cloud as a security practice. It established an incident response team to monitor the hosted websites for security issues. While examining network access logs using SIEM, the incident response team came across some incidents that suggested that one of their websites was targeted by attackers and they successfully performed an SQL injection attack. Subsequently, the incident response team made the website and database server offline. In which of the following steps of the incident response lifecycle, the incident team determined to make that decision?

A. Containment B. Analysis C. Coordination and information sharing D. Post-mortem

Answer: A

Question #5 (Topic: Exam A)

Global CloudEnv is a cloud service provider that provides various cloud-based services to cloud consumers. The cloud service provider adheres to the framework that can be used as a tool to systematically assess cloud implementation by providing guidance on the security controls that should be implemented by specific actors within the cloud supply chain. It is used as the standard to assess the security posture of organizations on the Security, Trust, Assurance, and Risk (STAR) registry. Based on the given information, which of the following cybersecurity control frameworks does Global CloudEnv adhere to?

A. CDMI B. CSA CAIQ C. CSA CCM D. ITU-T X.1601

Answer: C

ECCouncil 312-40v2 - Certified Cloud Security Engineer (CCSE) v2 Exam