FirstTry

Exam objective

CEH

Cloud Computing

This objective sits in Cloud Computing, which carries 5% of the CEH exam. The questions below are original, written from the official objective title above, and each explanation cites the EC-Council page it rests on.

Objective title verbatim from the official objectives. EC-Council exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

Cloud Computing

A team needs to install its own operating system images and run arbitrary software, while the provider supplies only processing, storage and networking. Which cloud service model is that?

Software as a ServiceSaaS means using the provider's finished application through a browser or an API, with no operating system for the consumer to touch.
Storage as a ServiceStorage as a Service is a vendor marketing label, not one of the three service models the definition lists.
Platform as a ServicePaaS gives the consumer a managed runtime for deployed code. It stops short of arbitrary software and its own operating system images.
Infrastructure as a ServiceCorrect · your answerCorrect.

Correct.

Checked against nvlpubs.nist.gov, September 2026

Concept

The NIST service models are separated by where consumer control stops. The lower the model, the more of the stack the consumer configures and has to defend, and the less the provider hardens on its behalf.

Why D

The consumer provisions processing, storage and networks and then deploys whatever software it likes on top, including the operating system. Control of the underlying platform stays with the provider.

Source

Infrastructure as a Service (IaaS). The capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications.

NIST, SP 800-145 The NIST Definition of Cloud Computing, checked September 2026
#cloud-service-models#iaas#nist-sp-800-145

Now you: practice questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

Cloud Computing

Four regional hospitals want a cloud environment reserved for their organizations alone, shaped by the compliance rules all four share and operated jointly. Which deployment model is that?

Sample question 2 of 3

Cloud Computing

An analyst reviews the build file for a production image:

FROM node:20-alpineENV DB_PASSWORD=Pr0dPass2026COPY id_rsa /root/.ssh/id_rsa

What exposure should the analyst record?

Sample question 3 of 3

Cloud Computing

A team finds a bucket's Block Public Access settings switched off by a user whose only S3 permission is editing bucket policies. Where should Block Public Access be enforced instead?

That’s 3 of the full CEH bank.

Keep going free: 10 questions per certification in bank practice, with no account.

Continue practicing

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.