EC-Council 312-40 Practice Exams
Last updated on Oct 21,2026- Exam Code: 312-40
- Exam Name: Certified Cloud Security Engineer (CCSE)
- Certification Provider: EC-Council
- Latest update: Oct 21,2026
Teresa Ruiz works as a cloud security engineer in an IT company. In January 2021, the data deployed by her in the cloud environment was corrupted, which caused a tremendous loss to her organization. Therefore, her organization changed its cloud service provider. After deploying the workload and data in the new service provider’s cloud environment, Teresa backed up the entire data of her organization. A new employee, Barbara Houston, who recently joined Teresa’s organization as a cloud security engineer, only backed up those files that changed since the last executed backup.
Which type of backup was performed by Barbara in the cloud?
- A . Partial Backup
- B . Full Backup
- C . Incremental Backup
- D . Differential Backup
An organization wants to implement a zero-trust access model for its SaaS application on the GCP as well as its on-premises applications.
Which of the following GCP services can be used to eliminate the need for setting up a company-wide VPN and implement the RBAC feature to verify employee identities to access organizational applications?
- A . Cloud Endpoints
- B . Identity-Aware Proxy (IAP)
- C . Cloud Security Scanner
- D . Web Application and API Protection
Rufus Sewell, a cloud security engineer with 5 years of experience, recently joined an MNC as a senior cloud security engineer. Owing to the cost-effective security features and storage services provided by AWS, his organization has been using AWS cloud-based services since 2014. To create a RAID, Rufus created an Amazon EBS volume for the array and attached the EBS volume to the instance where he wants to host the array. Using the command line, Rufus successfully created a RAID. The array exhibits noteworthy performance both in read and write operations with no overhead by parity control and the entire storage capacity of the array is used.
The storage capacity of the RAID created by Rufus is equal to the sum of disk capacity in the set, but the array is not fault tolerant. It is ideal for non-critical cloud data storage that must be read/written at a high speed.
Based on the given information, which of the following RAID is created by Rufus?
- A . RAID 0
- B . RAID 5
- C . RAID 1
- D . RAID 6
James Harden works as a cloud security engineer in an IT company. James’ organization has adopted a RaaS architectural model in which the production application is placed in the cloud and the recovery or backup target is kept in the private data center. Based on the given information, which RaaS architectural model is implemented in James’ organization?
- A . From-cloud RaaS
- B . By-cloud RaaS
- C . To-cloud RaaS
- D . In-cloud RaaS
Daffod is an American cloud service provider that provides cloud-based services to customers worldwide. Several customers are adopting the cloud services provided by Daffod because they are secure and cost-effective. Daffod is compliant with the cloud computing law that protects the student information collected by educational institutions and their associated vendors.
Based on the information given, which law does Daffod adhere to?
- A . ECPA
- B . FERPA
- C . CLOUD
- D . FISMA
WinSun Computers is a software firm that adopted cloud computing. To keep the cloud environment secure, the organization must ensure that it adheres to the regulations, controls, and rules framed by its management in the cloud environment.
Which of the following represents the adherence to these regulations, controls, and rules framed by the organization in this scenario?
- A . Risk Management
- B . Regulatory Compliance
- C . Governance
- D . Corporate Compliance
Dustin Hoffman works as a cloud security engineer in a healthcare company. His organization uses AWS cloud- based services. Dustin would like to view the security alerts and security posture across his organization’s AWS account.
Which AWS service can provide aggregated, organized, and prioritized security alerts from AWS services such as GuardDuty, Inspector, Macie, IAM Analyzer, Systems Manager, Firewall Manager, and AWS Partner Network to Dustin?
- A . AWS Config
- B . AWS CloudTrail
- C . AWS Security Hub
- D . AWS CloudFormation
Teresa Palmer has been working as a cloud security engineer in a multinational company. Her organization contains a huge amount of data; if these data are transferred to AWS S3 through the internet, it will take weeks. Teresa’s organization does not want to spend money on upgrading its internet to a high-speed internet connection. Therefore, Teresa has been sending large amounts of backup data (terabytes to petabytes) to AWS from on-premises using a physical device, which was provided by Amazon. The data in the physical device are imported and exported from and to AWS S3 buckets. This method of data transfer is cost-effective, secure, and faster than the internet for her organization.
Based on the given information, which of the following AWS services is being used by Teresa?
- A . AWS Elastic Beanstalk
- B . AWS Storage Gateway Volumes
- C . AWS Storage Gateway Tapes
- D . AWS Snowball
YourTrustedCloud is a cloud service provider that provides cloud-based services to several multinational companies. The organization adheres to various frameworks and standards. YourTrustedCloud stores and processes credit card and payment-related data in the cloud environment and ensures the security of transactions and the credit card processing system.
Based on the given information, which of the following standards does YourTrustedCloud adhere to?
- A . CLOUD
- B . FERPA
- C . GLBA
- D . PCI DSS
VenturiaCloud is a cloud service provider that offers robust and cost-effective cloud-based services to cloud consumers. The organization became a victim of a cybersecurity attack. An attacker performed a DDoS attack over the cloud that caused failure in the entire cloud environment. VenturiaCloud conducted a forensics investigation.
Who among the following are the first line of defense against cloud security attacks with their primary role being responding against any type of security incident immediately?
- A . Law Advisors
- B . Incident Handlers
- C . Investigators
- D . IT Professionals