EC-Council 312-40 CCSE v2 Exam Practice Questions
US$39
Every question with the correct answer and why the other options are wrong.
Card, Apple Pay, Google Pay or PayPal. Your PDF is prepared and emailed to you after checkout, usually within a few hours.
I was worried I’d need a some months to prepare for this exam but thanks to these dumps I was done in just a few weeks. It’s like they gave me a shortcut to success.
Three of the 147 questions in this pack
Question 1
Lexie Roth works as a cloud security engineer in an IT company located in Boston, Massachusetts. Her organization generates a huge amount of data. To increase the storage size, speed, and fault tolerance, Lexie would like to configure and create a RAID. Therefore, she created a RAID on Windows Server 2016, which includes block-level striping with a distributed parity. The parity information is distributed among all drives, except one. The data chunks in the RAID are larger than the regular I/O size, but they can be re-sized. To prevent data loss after a drive fails, data are calculated from the distributed parity. The RAID configured by Lexie requires at least three disks, but for robust performance, Lexie used seven disks. Based on the given information, which of the following RAID was configured and created by Lexie?
Show answer and explanation
Correct answer: B. RAID 5
RAID 5 combines block-level striping with parity that is distributed across all member drives instead of being kept on one dedicated disk. It needs a minimum of three disks, and the stripe (chunk) size is configurable. If one drive fails, the missing data is rebuilt by calculating it from the surviving data blocks and the distributed parity, so the array keeps running without data loss. Adding more disks, such as the seven used here, increases usable capacity and read throughput while still tolerating the loss of a single drive.
Why the other options are wrong
- A. RAID 3 stripes at the byte level and stores all parity on one dedicated drive, so its parity is not distributed.
- C. RAID 1 mirrors identical data onto two or more drives and uses neither striping nor parity.
- D. RAID 0 stripes data across drives for speed but stores no parity, so one failed drive destroys the whole array.
Question 2
Cindy Williams has been working as a cloud security engineer in an IT company situated in Austin, Texas. Owing to the robust security and cost-effective features provided by AWS, her organization adopted AWS cloud-based services. Cindy has deployed an application in the Amazon Elastic Compute Cloud (EC2) instance.
Which of the following cloud computing service model does the Amazon EC2 instance represent?
Show answer and explanation
Correct answer: D. IaaS
Amazon EC2 provides virtual servers on rented infrastructure, which is the Infrastructure-as-a-Service (IaaS) model. AWS operates the physical hosts, networking and hypervisor, while the customer chooses the machine image and is responsible for the guest operating system, patching, middleware, the deployed application and its data. Because the customer controls everything above the virtualization layer, EC2 sits at the infrastructure level of the stack rather than at the platform or software level.
Why the other options are wrong
- A. SaaS delivers a finished application that the provider runs entirely, whereas EC2 hands the customer a server to configure and load with software.
- B. DaaS delivers hosted virtual desktops to end users, which is not what launching an EC2 instance for an application provides.
- C. PaaS supplies a managed runtime where the provider handles the operating system and the customer only deploys code, but on EC2 the customer manages the operating system.
Question 3
Billy Pratt works as a cloud security engineer in an MNC. In 2012, his organization transferred all applications and data into an AWS cloud environment. Billy would like to analyze, investigate, and identify the root cause of malicious activities in his organization’s AWS cloud environment.
Which of the following Amazon services automatically collects data from various AWS resources and utilizes machine learning, statistical analysis, and graph theory to provide a unified and interactive view of resources and users that would help Billy in determining the root cause of suspicious activities?
Show answer and explanation
Correct answer: B. Amazon Detective
Amazon Detective is built for security investigation and root cause analysis. It automatically collects log and event data from AWS resources and uses machine learning, statistical analysis and graph theory to build a linked data set that shows how users, resources and activity relate over time. Analysts can pivot from a finding to an interactive visualization and trace how a suspicious event started and what it touched, which is exactly the unified view the scenario describes.
Why the other options are wrong
- A. Amazon Inspector scans workloads such as EC2 instances and container images for software vulnerabilities and unintended network exposure, and it does not trace the cause of malicious activity.
- C. Amazon GuardDuty detects threats and raises findings, but it does not build the linked, graph-based view needed to investigate how an incident unfolded.
- D. Amazon Macie discovers and classifies sensitive data in S3, so it does not correlate user and resource activity to find root causes.
2 reviews for EC-Council 312-40 CCSE v2 Exam Practice Questions
Only logged in customers who have purchased this product may leave a review.
How much of the EC-Council 312-40 CCSE v2 bank is free?
147 questions in the bankEach step includes the one before, so buying only adds new questions.
- You are here10questionsFree sampleThree on this page, all ten as a PDF.Download the sample
- 3725% of the bankPractice pageFree on the site, every answer explained.Go to the practice page
- 73the first half of the packHalf PackFree by email, as one PDF, every answer explained.Get the Half Pack
- 147100%, the whole bankFull pack, US$39Plus the questions-only PDF, monthly updates, refund if you fail.Get the full pack
What’s in the EC-Council 312-40 CCSE v2 pack
- 147 questions mapped to the CCSE v2 exam blueprint
- Answers and explanations for every question, including the wrong options
- A questions-only PDF for timed practice runs
- Delivered by email shortly after checkout
- Free monthly updates for as long as the exam is live
- Pass or your money back
A 312-40 attempt costs US$550. This pack is US$39, paid once.
What makes the CCSE v2 hard
CCSE is the multi-cloud security exam that CCSP is not: where CCSP stays vendor-neutral, CCSE expects candidates to know how the same control is implemented in AWS, Azure and Google Cloud. 125 questions in four hours is a long sitting, and the questions move between conceptual and hands-on, so both what a CSPM does and which service provides it on each platform need to be known.
The blueprint runs through eleven modules: cloud security fundamentals, platform and infrastructure security, application security including container and serverless security, data security with KMS and HSM, operations security with IAM, logging and CSPM, penetration testing in the cloud, incident detection and response, forensics, business continuity and disaster recovery, governance, risk and compliance, and standards, policies and legal issues.
The passing score is 70%.
About the exam
312-40 (Certified Cloud Security Engineer v2) earns the EC-Council CCSE certification. It covers cloud security fundamentals, platform and infrastructure security, application security, data security, operations security, cloud penetration testing, incident detection and response, forensics, business continuity and disaster recovery, governance, risk and compliance, and standards, policies and legal issues across AWS, Azure and Google Cloud. There are no prerequisites with official training; self-study candidates need two years of information security experience and an eligibility application.
Questions before you buy
How quickly do I receive it?
Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.
Are updates included?
Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.
What if I fail the exam?
We refund the pack, or swap it for any other pack if you would rather keep studying. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.
What is your pass rate?
99% of customers who prepare with a CertStash pack pass. If you do not, we refund the pack, or swap it for another pack.
Can I share it with colleagues?
Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.
Related products
-
EC-Council 312-39v2 CSA v2
196 questionsUpdated Nov 20265.0 (1) US$39 -
EC-Council 312-49v11 CHFI v11
452 questionsUpdated Nov 20265.0 (2) US$39 -
EC-Council 212-82 CCT
125 questionsUpdated Nov 20265.0 (1) US$39 -
EC-Council 212-81v3 ECES
64 questionsUpdated Nov 20264.5 (2) US$39
Tim –
Now I will be one of your EC-COUNCIL 312-40 dumps loyal customers.
Patience Currey –
I was worried I’d need a some months to prepare for this exam but thanks to these dumps I was done in just a few weeks. It’s like they gave me a shortcut to success.