Free EC-COUNCIL 312-40 Exam Dumps Questions & Answers

Kevin O'Malley discovers that an attacker exploited a vulnerability to break out of a virtual machine and gain unauthorized access to the underlying hypervisor. Which type of attack does this describe?

• A.SQL injection
• B.VM escape
• C.Cross-site scripting
• D.Session hijacking

Tanya Brooks is investigating a security incident where a cloud storage bucket was found to be publicly accessible, exposing sensitive customer data. Which phase of the incident response lifecycle is Tanya currently in when she is determining the scope and impact of the exposure?

• A.Preparation
• B.Detection and Analysis
• C.Post-Incident Activity
• D.Containment, Eradication, and Recovery

SecAppSol Pvt. Ltd. is a cloud software and application development company located in Louisville, Kentucky. The security features provided by its previous cloud service provider was not satisfactory, and in 2012, the organization became a victim of eavesdropping. Therefore, SecAppSol Pvt. Ltd. changed its cloud service provider and adopted AWS cloud-based services owing to its robust and cost-effective security features. How does SecAppSol Pvt. Ltd.'s security team encrypt the traffic between the load balancer and client that initiate SSL or TLS sessions?

• A.By enabling Cloud Identity Aware Proxy
• B.By enabling Amazon GuardDuty
• C.By enabling HTTPS listener
• D.By enabling RADIUS Authentication

Cindy Williams has been working as a cloud security engineer in an IT company situated in Austin, Texas. Owing to the robust security and cost-effective features provided by AWS, her organization adopted AWS cloud-based services. Cindy has deployed an application in the Amazon Elastic Compute Cloud (EC2) instance. Which of the following cloud computing service model does the Amazon EC2 instance represent?

• A.DaaS
• B.SaaS
• C.PaaS
• D.IaaS

Richard Roxburgh works as a cloud security engineer in an IT company. His organization was dissatisfied with the services of its previous cloud service provider. Therefore, in January 2020, his organization adopted AWS cloud-based services and shifted all workloads and data in the AWS cloud. Richard wants to provide complete security to the hosted applications before deployment and while running in the AWS ecosystem. Which of the following automated security assessment services provided by AWS can be used by Richard to improve application security and check the application for any type of vulnerability or deviation from the best practices automatically?

• A.AWS CloudFormation
• B.Amazon Inspector
• C.AWS Control Tower
• D.Amazon CloudFront