Exam 312-49v11 Topic 2 Question 617 Discussion
Actual exam question for EC-COUNCIL's 312-49v11 exam
Question #: 617
Topic #: 2
Question #: 617
Topic #: 2
A company experiences a major data breach within its cloud infrastructure after a critical failure on the part of its cloud service provider (CSP). The breach occurs because the CSP ' s infrastructure fails to adequately segregate and safeguard the data of different customers in a multi-tenant environment. The attacker exploits this weakness, gaining unauthorized access to sensitive data from multiple clients sharing the same cloud systems. As a result, customer data is revealed across several accounts, with the attacker using this access to move laterally through the system, escalating privileges, and accessing additional confidential information.
The breach remained undetected for an extended period, allowing the attacker to cover their tracks and exfiltrate large volumes of data. What threat is most likely to be the cause of this issue?
The breach remained undetected for an extended period, allowing the attacker to cover their tracks and exfiltrate large volumes of data. What threat is most likely to be the cause of this issue?
Suggested Answer: D Vote an answer
Option D is the strongest answer because the scenario clearly describes a multi-tenant cloud environment in which the provider failed to properly separate one customer's resources from another's. That is the classic problem of insufficient resource isolation . When tenant separation is weak, an attacker can cross boundaries between customer environments, access unauthorized data, and potentially move laterally across shared infrastructure.
This fits the fact pattern far better than the other options. Failure in due diligence concerns poor vendor selection, but the direct technical cause here is not selection error; it is the isolation failure itself. Loss of client control is a general cloud concern but does not specifically explain how the breach occurred. Lack of monitoring may explain why the attack went unnoticed, but it is not the root threat described in the question.
From a CHFI cloud-forensics perspective, investigators must recognize threats linked to multi-tenancy , data segregation failures , and provider-side weaknesses in shared environments. Since the breach affected several accounts because tenant boundaries failed, the correct answer is insufficient resource isolation causing cross-tenant data exposure .
This fits the fact pattern far better than the other options. Failure in due diligence concerns poor vendor selection, but the direct technical cause here is not selection error; it is the isolation failure itself. Loss of client control is a general cloud concern but does not specifically explain how the breach occurred. Lack of monitoring may explain why the attack went unnoticed, but it is not the root threat described in the question.
From a CHFI cloud-forensics perspective, investigators must recognize threats linked to multi-tenancy , data segregation failures , and provider-side weaknesses in shared environments. Since the breach affected several accounts because tenant boundaries failed, the correct answer is insufficient resource isolation causing cross-tenant data exposure .
by Kennedy at Jul 20, 2026, 05:02 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).