Question # 1 An organization uses AWS for its operations. It is observed that the organization's EC2 instance is
communicating with a suspicious port. Forensic investigators need to understand the patterns of the current security breach. Which log source on the AWS platform can provide investigators with data of evidentiary value during their investigation? A. Amazon CloudTrailB. Amazon CloudWatchC. Amazon VPC flow logsD. S3 Server Access Logs
Click for Answer
C. Amazon VPC flow logs
Answer Description Explanation:
Understanding the Incident: When an EC2 instance communicates with a suspicious port, it’s crucial to analyze network traffic to understand the patterns of the security breach1.
Question # 2 Falcon Computers is an IT company that runs its IT infrastructure on the cloud. The organization must implement cloud governance in its corporate cloud environment to align its business vision with the cloud vision. Which of the following cloud governance components can help the organization to align the cloud vision and business vision?
A. Cloud center of excellence
B. Norms, models, reference architectures, best practices, guidelines, and policies
C. Processes for the cloud service lifecycle
D. Cloud business office
Click for Answer
A. Cloud center of excellence
Question # 3 An organization wants to implement a zero-trust access model for its SaaS application on the GCP as well as its on-premises applications. Which of the following GCP services can be used to eliminate the need for setting up a company-wide VPN and implement the RBAC feature to verify employee identities to access organizational applications?
A. Cloud Endpoints
B. Identity-Aware Proxy (IAP)
C. Cloud Security Scanner
D. Web Application and API Protection
Click for Answer
B. Identity-Aware Proxy (IAP)
Question # 4 A web server passes the reservation information to an application server and then the application server queries an Airline service. Which of the following AWS service allows secure hosted queue server-side encryption (SSE), or uses custom SSE keys managed in AWS Key Management Service (AWS KMS)?
A. Amazon Simple Workflow
B. Amazon SQS
C. Amazon SNS
D. Amazon CloudSearch
Click for Answer
B. Amazon SQS
Question # 5 Luke Grimes has recently joined a multinational company as a cloud security engineer. The company has been using the AWS cloud. He would like to reduce the risk of man-in-the-middle attacks in all Redshift clusters.
Which of the following parameters should Grimes enable to reduce the risk of man-in-the-middle attacks in all Redshift clusters? A. wlm_ssl
B. enable_user_ssl
C. require_ssl
D. fips_ssl
Click for Answer
C. require_ssl
Question # 6 An organization with resources on Google Cloud regularly backs up its service capabilities to ensure high availability and reduce the downtime when a zone or instance becomes unavailable owing to zonal outage or memory shortage in an instance. However, as protocol, the organization must frequently test whether these regular backups are configured. Which tool's high availability settings must be checked for this?
A. MySQL Database
B. Always on Availability Groups (AGs)
C. SQL Server Database Mirroring (DBM)
D. Google Cloud SQL
Click for Answer
D. Google Cloud SQL
Question # 7 Teresa Palmer has been working as a cloud security engineer in a multinational company. Her organization contains a huge amount of data; if these data are transferred to AWS S3 through the internet, it will take weeks. Teresa's organization does not want to spend money on upgrading its internet to a high-speed internet connection. Therefore, Teresa has been sending large amounts of backup data (terabytes to petabytes) to AWS from on-premises using a physical device, which was provided by Amazon. The data in the physical device are imported and exported from and to AWS S3 buckets. This method of data transfer is cost-effective, secure, and faster than the internet for her organization. Based on the given information, which of the following AWS services is being used by Teresa?
A. AWS Elastic Beanstalk
B. AWS Storage Gateway Volumes
C. AWS Storage Gateway Tapes
D. AWS Snowball
Click for Answer
D. AWS Snowball
Question # 8 Jack Jensen works as a cloud security engineer in an IT company located in Madison, Wisconsin. Owing to the various security services provided by Google, in 2012, his organization adopted Google cloud-based services. Jack would like to identify security abnormalities to secure his organizational data and workload. Which of the following is a built-in feature in the Security Command Center that utilizes behavioral signals to detect security abnormalities such as unusual activity and leaked credentials in virtual machines or GCP projects?
A. Anomaly Detector
B. Security Health Analytics
C. Cloud Armor
D. Cloud Anomaly Detection
Click for Answer
B. Security Health Analytics
Up-to-Date
We always provide up-to-date 312-40 exam dumps to our clients. Keep checking website for updates and download.
Excellence
Quality and excellence of our EC-Council Certified Cloud Security Engineer (CCSE) practice questions are above customers expectations. Contact live chat to know more.
Success
Your SUCCESS is assured with the 312-40 exam questions of passin1day.com. Just Buy, Prepare and PASS!
Quality
All our braindumps are verified with their correct answers. Download Certified Cloud Security Engineer (CCSE) Practice tests in a printable PDF format.
Basic
$80
Any 3 Exams of Your Choice
3 Exams PDF + Online Test Engine
Buy Now
Premium
$100
Any 4 Exams of Your Choice
4 Exams PDF + Online Test Engine
Buy Now
Gold
$125
Any 5 Exams of Your Choice
5 Exams PDF + Online Test Engine
Buy Now
Passin1Day has a big success story in last 12 years with a long list of satisfied customers.
312-40 Dumps
We have recently updated ECCouncil 312-40 dumps study guide. You can use our Certified Cloud Security Engineer (CCSE) braindumps and pass your exam in just 24 hours. Our EC-Council Certified Cloud Security Engineer (CCSE) real exam contains latest questions. We are providing ECCouncil 312-40 dumps with updates for 3 months. You can purchase in advance and start studying. Whenever ECCouncil update EC-Council Certified Cloud Security Engineer (CCSE) exam, we also update our file with new questions. Passin1day is here to provide real 312-40 exam questions to people who find it difficult to pass exam
What Our Customers Say
Jeff Brown
Thanks you so much passin1day.com team for all the help that you have provided me in my ECCouncil exam. I will use your dumps for next certification as well.
Mareena Frederick
You guys are awesome. Even 1 day is too much. I prepared my exam in just 3 hours with your 312-40 exam dumps and passed it in first attempt :)
Ralph Donald
I am the fully satisfied customer of passin1day.com. I have passed my exam using your EC-Council Certified Cloud Security Engineer (CCSE) braindumps in first attempt. You guys are the secret behind my success ;)
Lilly Solomon
I was so depressed when I get failed in my Cisco exam but thanks GOD you guys exist and helped me in passing my exams. I am nothing without you.
