312-40v2 Exam - Free ECCouncil Questions and Answers

Question #11 (Topic: Exam A)

Rebecca Mader has been working as a cloud security engineer in an IT company located in Detroit, Michigan. Her organization uses AWS cloud-based services. An application is launched by a developer on an EC2 instance that needs access to the S3 bucket (photos). Rebecca created a get-pics service role and attached it to the EC2 instance. This service role comprises a permission policy that allows read-only access to the S3 bucket and a trust policy that allows the instance to assume the role and retrieve temporary credentials. The application uses the temporary credentials of the role to access the photo bucket when it runs on the instance. Does the developer need to share or manage credentials or does the admin need to grant permission to the developer to access the photo bucket?

A. Yes, the developer has to share or manage credentials, but the admin does not have to grant permission to the developer to access the photo bucket B. No, the developer never has to share or manage credentials and the admin does not have to grant permission to the developer to access the photo bucket C. No, the developer never has to share or manage credentials, but the admin has to grant permission to the developer to access the photo bucket D. Yes, the developer should share or manage credentials and the admin should grant permission to the developer to access the photo bucket

Answer: B

Question #12 (Topic: Exam A)

Cindy Williams works as a cloud security engineer in an IT company located in Seattle, Washington. Owing to the cost-effective security, governance, and storage features provided by AWS, her organization adopted AWS cloud-based services. Cindy would like to detect any unusual activity in her organization’s AWS account. She would like to obtain the event history of her organization’s AWS account activity for security analysis and resource change tracking. Which of the following AWS service enables operational auditing, compliance, governance, and risk auditing for her organization’s AWS account?

A. AWS Security Hub B. AWS CloudTrail C. AWS Config D. AWS CloudFormation

Answer: B

Question #13 (Topic: Exam A)

Katie Holmes has been working as a cloud security engineer over the past 7 years in an MNC. Since the outbreak of the COVID-19 pandemic, the cloud service provider could not provide cloud services efficiently to her organization. Therefore, Katie suggested to the management that they should design and build their own data center. Katie’s requisition was approved, and after 8 months, Katie’s team successfully designed and built an on-premises data center. The data center meets all organizational requirements; however, the capacity components are not redundant. If a component is removed, the data center comes to a halt. Which tier data center was designed and constructed by Katie’s team?

A. Tier III B. Tier I C. Tier II D. Tier IV

Answer: B

Question #14 (Topic: Exam A)

Daffod is an American cloud service provider that provides cloud-based services to customers worldwide. Several customers are adopting the cloud services provided by Daffod because they are secure and cost- effective. Daffod complies with the cloud computing law enacted in the US to realize the importance of information security in the economic and national security interests of the US. Based on the given information, which law order does Daffod adhere to?

A. FERPA B. FISMA C. ECPA D. CLOUD

Answer: D

Question #15 (Topic: Exam A)

Falcon Computers is an IT company that runs its IT infrastructure on the cloud. The organization must implement cloud governance in its corporate cloud environment to align its business vision with the cloud vision. Which of the following cloud governance components can help the organization to align the cloud vision and business vision?

A. Cloud business office B. Processes for the cloud service lifecycle C. Cloud center of excellence D. Norms, models, reference architectures, best practices, guidelines, and policies

Answer: A

ECCouncil 312-40v2 - Certified Cloud Security Engineer (CCSE) v2 Exam