312-40試験無料問題集（150題）「EC-COUNCIL EC-Council Certified Cloud Security Engineer (CCSE) 認定」

出題：1

Georgia Lyman works as a cloud security engineer in a multinational company. Her organization uses cloud-based services. Its virtualized networks and associated virtualized resources encountered certain capacity limitations that affected the data transfer performance and virtual server communication. How can Georgia eliminate the data transfer capacity thresholds imposed on a virtual server by its virtualized environment?

A. By restricting the virtual appliance to bypass the hypervisor and access the I/O card of the physical server directly

B. By restricting the virtual server to bypass the hypervisor and access the I/O card of the physical server directly

C. By allowing the virtual appliance to bypass the hypervisor and access the I/O card of the physical server directly

D. By allowing the virtual server to bypass the hypervisor and access the I/O card of the physical server directly

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Scott Herman works as a cloud security engineer in an IT company. His organization has deployed a 3-tier web application in the same Google Cloud Virtual Private Cloud. Each tier (web interface (UI), API, and database) is scaled independently of others. Scott Herman obtained a requirement that the network traffic should always access the database using the API and any request coming directly from the web interface to the database should not be allowed. How should Scott configure the network with minimal steps?

A. By adding tags to each tier and setting up firewall rules to allow the desired traffic flow

B. By setting up software-based firewalls on individual VMs

C. By adding each tier to a different subnetwork

D. By adding tags to each tier and setting up routes to allow the desired traffic flow

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Rebecca Mader has been working as a cloud security engineer in an IT company located in Detroit, Michigan. Her organization uses AWS cloud-based services. An application is launched by a developer on an EC2 instance that needs access to the S3 bucket (photos). Rebecca created a get-pics service role and attached it to the EC2 instance. This service role comprises a permission policy that allows read-only access to the S3 bucket and a trust policy that allows the instance to assume the role and retrieve temporary credentials. The application uses the temporary credentials of the role to access the photo bucket when it runs on the instance. Does the developer need to share or manage credentials or does the admin need to grant permission to the developer to access the photo bucket?

A. Yes, the developer should share or manage credentials and the admin should grant permission to the developer to access the photo bucket

B. No, the developer never has to share or manage credentials and the admin does not have to grant permission to the developer to access the photo bucket

C. No, the developer never has to share or manage credentials, but the admin has to grant permission to the developer to access the photo bucket

D. Yes, the developer has to share or manage credentials, but the admin does not have to grant permission to the developer to access the photo bucket

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

The cloud administrator John was assigned a task to create a different subscription for each division of his organization. He has to ensure all the subscriptions are linked to a single Azure AD tenant and each subscription has identical role assignments. Which Azure service will he make use of?

A. Azure AD Identity Protection

B. Azure AD Self-Service Password Reset

C. Azure AD Privileged Identity Management

D. Azure AD Multi-Factor Authentication

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

TechnoSoft Pvt. Ltd. is a BPO company that provides 24 * 7 customer service. To secure the organizational data and applications from adversaries, the organization adopted cloud computing. The security team observed that the employees are browsing restricted and inappropriate web pages. Which of the following techniques will help the security team of TechnoSoft Pvt. Ltd. in preventing the employees from accessing restricted or inappropriate web pages?

A. URL filtering

B. Cloud access security broker (CASB)

C. Geo-Filtering

D. Data Loss Prevention (DLP)

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Kevin Williamson has been working as a cloud security engineer in a startup IT company. The business performed by his organization does not require live updating. A DRaaS company provided a disaster recovery site to Kevin's organization with little or no equipment, backup services with no network connectivity, it does not perform automatic failover. and involves data synchronization with a high risk of data loss. Based on the given information, which of the following disaster recovery sites is provided by the DRaaS company to Kevin's organization?

A. Remote site

B. Cold Site

C. Hot Site

D. Warm Site

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

312-40試験無料問題集「EC-COUNCIL EC-Council Certified Cloud Security Engineer (CCSE) 認定」