Free 312-40: EC-Council Certified Cloud Security Engineer (CCSE) Exam Questions and Answers

Last updated: September 19, 2026

Exam code

312-40

Provider

ECCouncil

Questions in our bank

1000+

Free to read

First 10, with answers

Our test mode duration & pass mark

130 mins · 70%

Verified answers

Reviewed weekly

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   TetraSoft Pvt. Ltd. is an IT company that provides software and application services to numerous customers across the globe. In 2015, the organization migrated its applications and data from on-premises to the AWS cloud environment. The cloud security team of TetraSoft Pvt. Ltd. suspected that the EC2 instance that launched the core application of the organization is compromised. Given below are randomly arranged steps involved in the forensic acquisition of an EC2 instance. In this scenario, when should the investigators ensure that a forensic instance is in the terminated state?

   • A. After creating evidence volume from the snapshot
   • B. Before taking a snapshot of the EC2 instance
   • C. Before attaching evidence volume to the forensic instance
   • D. After attaching evidence volume to the forensic instance
   Reveal Answer

2. Question #2

   Alex Hales works as a cloud security specialist in an IT company. He wants to make his organization's business faster and more efficient by implementing Security Assertion Mark- up Language (SAML) that will enable employees to securely access multiple cations with a single set of credentials. What is SAML?

   • A. It is a YAML-based authentication and authorization standard
   • B. It is an HTML based authentication and authorization standard
   • C. It is a XML based authentication and authorization standard
   • D. It is a JSON based authentication and authorization standard
   Reveal Answer

3. Question #3

   Gabriel Bateman has been working as a cloud security engineer in an IT company for the past 5 years. Owing to the recent onset of the COVID-19 pandemic, his organization has given the provision to work from home to all employees. Gabriel's organization uses Microsoft Office 365 that allows all employees access files, emails, and other Office programs securely from various locations on multiple devices. Who among the following is responsible for patch management in Microsoft Office 365?

   • A. Both Gabriel's organization and Microsoft share responsibilities for patch management
   • B. Gabriel's organization should outsource patch management to a third party
   • C. Gabriel's organization is entirely responsible for patch management
   • D. Microsoft is entirely responsible for patch management
   Reveal Answer

4. Question #4

   The TCK Bank adopts cloud for storing the private data of its customers. The bank usually explains its information sharing practices to its customers and safeguards sensitive data. However, there exist some security loopholes in its information sharing practices. Therefore, hackers could steal the critical data of the bank's customers. In this situation, under which cloud compliance framework will the bank be penalized?

   • A. GLBA
   • B. ITAR
   • C. NIST
   • D. GDPR
   Reveal Answer

5. Question #5

   Global SoftTechSol is a multinational company that provides customized software solutions and services to various clients located in different countries. It uses a public cloud to host its applications and services. Global SoftTechSol uses Cloud Debugger to inspect the current state of a running application in real-time, find bugs, and understand the behavior of the code in production. Identify the service provider that provides the Cloud Debugger feature to Global SoftTechSol?

   • A. Google
   • B. AWS
   • C. IBM
   • D. Azure
   Reveal Answer

6. Question #6

   WinSun Computers is a software firm that adopted cloud computing. To keep the cloud environment secure, the organization must ensure that it adheres to the regulations, controls, and rules framed by its management in the cloud environment. Which of the following represents the adherence to these regulations, controls, and rules framed by the organization in this scenario?

   • A. Risk Management
   • B. Regulatory Compliance
   • C. Governance
   • D. Corporate Compliance
   Reveal Answer

7. Question #7

   Samuel Jackson has been working as a cloud security engineer for the past 12 years in VolkSec Pvt. Ltd., whose applications are hosted in a private cloud. Owing to the increased number of users for its services, the organizations is finding it difficult to manage the on- premises data center. To overcome scalability and data storage issues, Samuel advised the management of his organization to migrate to a public cloud and shift the applications and data. Once the suggestion to migrate to public cloud was accepted by the management, Samuel was asked to select a cloud service provider. After extensive research on the available public cloud service providers, Samuel made his recommendation. Within a short period, Samuel along with his team successfully transferred all applications and data to the public cloud. Samuel's team would like to configure and maintain the platform, infrastructure, and applications in the new cloud computing environment. Which component of a cloud platform and infrastructure provides tools and interfaces to Samuel's team for configuring and maintaining the platform, infrastructure, and application?

   • A. Physical and Environment Component
   • B. Compute Component
   • C. Management Component
   • D. Virtualization Component
   Reveal Answer

8. Question #8

   Dave Allen works as a cloud security engineer in an IT company located in Baltimore, Maryland. His organization uses cloud-based services; it also uses the Network Watcher regional service to monitor and diagnose problems at the network level. It contains network diagnostic and visualization tools that help in understanding, diagnosing, and obtaining visibility into the network in a cloud environment. This service helped Dave in detecting network vulnerabilities, monitoring network performance, and ensuring secure cloud operations. Which of the following cloud service providers offers the Network Watcher service?

   • A. Google
   • B. Azure
   • C. IBM
   • D. AWS
   Reveal Answer

9. Question #9

   Thomas Gibson is a cloud security engineer working in a multinational company. Thomas has created a Route 53 record set from his domain to a system in Florida, and a similar record to machines in Paris and Singapore. Assume that network conditions remain unchanged and Thomas has hosted the application on Amazon EC2 instance; moreover, multiple instances of the application are deployed on different EC2 regions. When a user located in London visits Thomas's domain, to which location does Amazon Route 53 route the user request?

   • A. Singapore
   • B. London
   • C. Florida
   • D. Paris
   Reveal Answer

10. Question #10

    An organization is developing a new AWS multitier web application with complex queries and table joins. However, because the organization is small with limited staff, it requires high availability. Which of the following Amazon services is suitable for the requirements of the organization?

    • A. Amazon HSM
    • B. Amazon Snowball
    • C. Amazon Glacier
    • D. Amazon DynamoDB
    Reveal Answer