Free 312-40 Questions for EC-COUNCIL EC-Council Certified Cloud Security Engineer (CCSE) 312-40 Exam as PDF & Practice Test Engine

Dustin Hoffman works as a cloud security engineer in a healthcare company. His organization uses AWS cloud-based services. Dustin would like to view the security alerts and security posture across his organization's AWS account. Which AWS service can provide aggregated, organized, and prioritized security alerts from AWS services such as GuardDuty, Inspector, Macie, IAM Analyzer, Systems Manager, Firewall Manager, and AWS Partner Network to Dustin?

Alex Hales works as a cloud security specialist in an IT company. He wants to make his organization's business faster and more efficient by implementing Security Assertion Mark-up Language (SAML) that will enable employees to securely access multiple applications with a single set of credentials. What is SAML?

Melissa George is a cloud security engineer in an IT company. Her organization has adopted cloud-based services. The integration of cloud services has become significantly complicated to be managed by her organization. Therefore, her organization requires a third-party to consult, mediate, and facilitate the selection of a solution. Which of the following NIST cloud deployment reference architecture actors manage cloud service usage, performance, and delivery, and maintains the relationship between the CSPs and cloud consumers?

Which of the following is a key characteristic of a "Cloud Access Security Broker" (CASB)?

The tech giant TSC uses cloud for its operations. As a cloud user, it should implement an effective risk management lifecycle to measure and monitor high and critical risks regularly.
Additionally, TSC should define what exactly should be measured and the acceptable variance to ensure timely mitigated risks. In this case, which of the following can be used as a tool for cloud risk management?

An organization wants to implement a security model in which no user or device is trusted by default, regardless of whether they are inside or outside the network perimeter, and every access request must be verified. Which security model does this describe?

An organization is developing a new AWS multitier web application with complex queries and table joins. However, because the organization is small with limited staff, it requires high availability. Which of the following Amazon services is suitable for the requirements of the organization?

Which of the following penetration testing approaches involves the tester having no prior knowledge of the target cloud environment's internal architecture, mimicking an external attacker?

A new public web application is deployed on AWS that will run behind an Application Load Balancer (ALB). An AWS security expert needs to encrypt the newly deployed application at the edge with an SSL/TLS certificate issued by an external certificate authority. In addition, he needs to ensure the rotation of the certificate yearly before it expires. Which of the following AWS services can be used to accomplish this?

Sandra, who works for SecAppSol Technologies, is on a vacation. Her boss asked her to solve an urgent issue in an application. Sandra had to use applications present on her office laptop to solve this issue, and she successfully rectified it. Despite being in a different location, she could securely use the application. What type of service did the organization use to ensure that Sandra could access her office laptop from a remote area?

SecureInfo Pvt. Ltd. has deployed all applications and data in the AWS cloud. The security team of this organization would like to examine the health of the organization's website regularly and switch (or failover) to a backup site if the primary website becomes unresponsive. Which of the following AWS services can provide DNS failover capabilities and health checks to ensure the availability of the organization's website?

AWS runs 35+ instances that are all CentOS machines. Updating these machines manually is a time intensive task that may lead to missed updates for some instances and create vulnerabilities.
Which of the following can be used to prevent each port of each instance from being opened to access the machine and install updates?

A cloud organization, AZS, wants to maintain homogeneity in its cloud operations because the CPU speed measured by AZS varies and the measurement units lack consistency in the standards. For example, AWS defines the CPU speed with Elastic Compute Unit, Google with Google Compute Engine Unit, and Microsoft with clock speed. Here, which cloud computing standard can leverage frameworks and architectures specific to the cloud for maintaining homogeneity in operations?

A cloud security engineer wants to implement a mechanism that automatically scans container images for known vulnerabilities before they are deployed to production. Which type of tool best fits this need?