CPENT Cloud And Hybrid Infrastructure Security Practice Question
An auditor is evaluating cloud storage security across multiple cloud providers. Which TWO of the following settings indicate improper security configurations for cloud storage buckets? (Choose TWO)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
An Amazon S3 bucket configured with ACLs allowing public read and write access.
Public read permissions and disabled encryption at rest are critical storage security findings.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
An Amazon S3 bucket configured with ACLs allowing public read and write access.
Why this is correct
Public write/read access on S3 is a major data exposure risk.
- ✗
An Azure Storage Account with 'Secure transfer required' set to Enabled.
Why it's wrong here
Secure transfer required enforces HTTPS and is secure.
- ✓
A Google Cloud Storage bucket with IAM binding granting storage.objectViewer to allUsers.
Why this is correct
Granting objectViewer to allUsers makes the bucket publicly accessible.
- ✗
Enabling versioning and object lock on financial data storage buckets.
Why it's wrong here
Versioning and object lock protect against accidental deletion or ransomware.
- ✗
Enabling AWS S3 Block Public Access at the account level.
Why it's wrong here
Account-level block public access is a recommended hardening step.
About these practice questions
One of 274 original CPENT practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official EC-Council exam blueprint
This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.