Eccouncil Exam 312-40 Topic 3 Question 11 Discussion

Actual exam question for Eccouncil's 312-40 exam

Question #: 11
Topic #: 3

Ewan McGregor works as a cloud security engineer in a multinational company that develops software and applications for eCommerce companies. Owing to the robust services provided by AWS for developing applications and software, his organization migrated to the AWS cloud in 2010. To test whether it is possible to escalate privileges to obtain AWS administrator account access, Ewan attempt to update the login profile with regular user accounts. Which of the following commands should Ewan try to update an existing login profile?

Aaws iam update-login-profile -- user-name < password > -- password < username >

Baws iam update-login-profile -- user-name < username > -- password < password >

Caws iam update-login-profile -- user-name < password > -- password < username >

Daws iam update-login-profile -- password < password > -- user-name < username >

Show Suggested Answer

Suggested Answer: C

According to the data protection laws of Central and South American countries, the primary responsibility for ensuring the security and privacy of personal data typically lies with the entity that owns the data, in this case, Terra Soft. Pvt. Ltd.

1.Data Ownership: Terra Soft. Pvt. Ltd, as the data owner, is responsible for the security and privacy of the personal data it collects and processes. This includes data transferred to cloud environments1.

1.Cloud Service Provider's Role: While VoxCloPro, as a cloud service provider, is responsible for the security of the cloud infrastructure, Terra Soft. Pvt. Ltd retains the responsibility for its data within that infrastructure2.

1.Legal Compliance: Terra Soft. Pvt. Ltd must ensure compliance with relevant data protection laws, which may include implementing appropriate security measures and maintaining control over how personal data is processed3.

1.Shared Responsibility Model: In cloud computing, there is often a shared responsibility model where the cloud service provider manages the security of the cloud, while the customer is responsible for security in the cloud. This means that Terra Soft. Pvt. Ltd is responsible for ensuring that its use of VoxCloPro's services complies with applicable data protection laws2.

Determination and Directive on the Usage of Cloud Computing Services2.

Privacy in Latin America and the Caribbean - Bloomberg Law News1.

Cloud Services Contracts and Data Protection - PPM Attorneys3.

by Aileen at Aug 03, 2024, 11:25 PM

Limited Time Offer

25%

21 days ago

I think Ewan should try option B.

upvoted 0 times

...