EC-Council CSE (112-54) Certification Sample Questions

CSE Dumps, 112-54 Dumps, 112-54 PDF, CSE VCE, EC-Council 112-54 VCE, EC-Council Cloud Security Essentials PDF The purpose of this Sample Question Set is to provide you with information about the EC-Council Cloud Security Essentials exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the 112-54 certification test. To get familiar with real exam environment, we suggest you try our Sample EC-Council CSE Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual EC-Council Cloud Security Essentials (CSE) certification exam.

These sample questions are simple and basic questions that represent likeness to the real EC-Council 112-54 exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium EC-Council CSE Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.

EC-Council 112-54 Sample Questions:

01. A cloud file server is valued at $60,000. A single ransomware incident would destroy 40% of that value, and such an incident is expected about once every two years.

What is the single loss expectancy (SLE) for this incident?

a) $150,000

b) $24,000

c) $12,000

d) $36,000

02. A cloud provider wants to sell its services to US government agencies. Those agencies may only use cloud services that have passed a standardized government security assessment and been approved for use.

Which program must the provider go through?

a) ISO/IEC 27018, an international standard in the ISO/IEC 27000 family

b) HIPAA, the US law setting privacy rules for health information

c) PCI DSS, a card industry standard

d) FedRAMP, the US federal program for cloud authorization

03. A company already uses a tool that checks its cloud account settings against policy, such as flagging storage that allows public access. It now wants protection for its running virtual machines, containers, and serverless functions, such as detecting malicious processes while they execute.

Which type of tool should it add?

a) Data loss prevention (DLP)

b) Cloud security posture management (CSPM), configured to scan more often

c) Cloud access security broker (CASB) monitoring the company's SaaS use

d) Cloud workload protection platform (CWPP)

04. A company deploys an automated rule. Whenever a storage bucket is found to be publicly readable, the rule changes that bucket back to private within seconds.

Which type of control is this rule?

a) A deterrent control, because it discourages staff from making buckets public

b) A preventive control, because it stops anyone from making a bucket public

c) A corrective control, because it fixes the problem after the problem has been detected

d) A detective control, because it finds public buckets and raises alerts

05. A company requires every employee to complete security awareness training each year and publishes an acceptable use policy for its cloud services.

Which category of controls do these measures belong to?

a) Administrative controls

b) Technical controls

c) Physical and environmental controls

d) Detective controls

06. A risk assessment finds that a cloud database could be breached through a stolen administrator password. The company responds by moving the database into a private subnet and requiring MFA for every administrator.

Which risk treatment has the company chosen?

a) Risk avoidance, which ends the activity that creates the risk

b) Risk transfer, which shifts the financial impact to an insurer or a partner

c) Risk mitigation, which lowers the likelihood or impact of the risk by adding controls

d) Risk acceptance, which records a decision to tolerate the risk as it is

07. An auditor asks a company to show that multi-factor authentication (MFA) was enforced on the company's own cloud administrator accounts all year. The company is deciding what to hand over.

Which evidence BEST answers the auditor's request?

a) Its own identity settings history and sign-in logs for those accounts

b) A screenshot taken today of the MFA setting on each administrator account

c) The company's written security policy that requires MFA for all cloud administrators

d) An IT manager's signed statement that MFA was enabled

08. Policy requires MFA for every business application. A legacy cloud-hosted application cannot support MFA and will take a year to replace. Until then, the team allows access to it only from the corporate network over a private connection and adds extra monitoring of its sign-ins.

Taken together, what kind of control are these substitute measures?

a) Deterrent controls that warn users against misusing the application

b) Corrective controls that restore the application after an attack

c) Compensating controls

d) Detective controls, because the added sign-in monitoring raises alerts

09. During a STRIDE threat modeling session for a cloud application, a team notes that a regular user could exploit a flaw in the profile settings page to add the administrator role to their own account.

Which STRIDE category does this threat belong to?

a) Spoofing identity

b) Denial of service

c) Information disclosure

d) Elevation of privilege

10. When setting cloud security priorities, a board of directors is asked to state the organization's risk appetite.

What does risk appetite describe?

a) The list of identified risks, each with its owner, rating, and chosen treatment

b) The risk that remains after controls have been applied to a threat

c) The amount and type of risk the organization is willing to accept in pursuit of its objectives

d) The likelihood and impact of a threat exploiting a weakness, rated on a matrix

Answers:

Question: 01 Answer: b	Question: 02 Answer: d	Question: 03 Answer: d	Question: 04 Answer: c	Question: 05 Answer: a
Question: 06 Answer: c	Question: 07 Answer: a	Question: 08 Answer: d	Question: 09 Answer: c	Question: 10 Answer: c

Note: For any error in EC-Council Cloud Security Essentials (CSE) (112-54) certification exam sample questions, please update us by writing an email on feedback@edusum.com.