Category: Cloud Accounts & External Services
Overview
Some EC-Council training labs require learners to sign in to external services such as cloud providers, code repositories, or other third-party platforms.
It is natural to have questions about how these accounts are used within the lab environment and what information may be visible while completing lab activities.
This article explains how instructor observation works, how sensitive information is handled, and provides recommendations for protecting your accounts while working in the lab environment.
Why are external accounts used?
Some lab modules require access to live services to provide practical, real-world experience.
Depending on the course, learners may interact with services such as:
- Amazon Web Services (AWS)
- Microsoft Azure
- Google Cloud Platform (GCP)
- GitHub
- Artificial Intelligence (AI) services
- Other third-party platforms
The specific services used depend on the course and lab module.
Can instructors observe my lab session?
Yes.
Authorized instructors may observe an active lab session to monitor learner progress or provide assistance when requested.
Observation allows instructors to view the same desktop session that the learner is currently using.
Can instructors control my lab?
Yes.
When providing assistance, an authorized instructor may take control of the active lab session.
This allows the instructor to interact with the lab environment using the same desktop session as the learner to help troubleshoot issues or demonstrate a procedure.
Unless otherwise indicated by your organization, learners typically remain connected and can continue interacting with the lab while assistance is being provided.
Can instructors see my passwords?
Password fields remain masked during normal observation.
Instructors are not provided with special monitoring capabilities or privileged access to view hidden credentials.
However, if an instructor is actively controlling the same desktop session, they have the same ability as the learner to interact with information displayed on the screen. For example, if credentials are intentionally revealed within the application or browser, or otherwise left visible on the desktop, the instructor could view that information just as the learner can.
For this reason, avoid leaving sensitive information visible when requesting live assistance.
Is my lab session recorded?
Lab sessions are not recorded as part of normal lab operation.
If your organization conducts instructor-led classes using an integrated virtual meeting platform, recordings of the online class may be available separately. These recordings are independent of the lab environment and do not represent recordings of the virtual machine itself.
If you have questions about classroom recordings, contact your instructor or training organization.
What happens to my lab after it ends?
The lab environment is temporary.
When your lab ends, the virtual machine is decommissioned and the lab environment is no longer accessible.
Any files or configuration changes made within the lab environment are intended only for the duration of the lab unless your course specifically supports saving and resuming lab sessions.
Are my credentials stored by the lab environment?
Credentials entered into external services are used only within the active lab session.
Sensitive information entered into masked password fields remains masked during normal observation.
As with any shared desktop session, information that is intentionally displayed or left visible on the screen may be seen by someone assisting you during an active support session.
Best Practices
To help protect your accounts while using the lab environment:
- Follow the instructions provided in the course guide.
- Only enter credentials into trusted websites identified in the lab instructions.
- Verify the website address before signing in.
- Do not leave passwords or other sensitive information visible on the screen when requesting assistance.
- Sign out of external services if instructed by the lab guide.
- Follow the security recommendations provided by the service provider, such as enabling multi-factor authentication (MFA) when appropriate.
Frequently Asked Questions
Can instructors see my saved passwords?
No special access is provided to instructors. They interact with the same desktop session that the learner is using.
Can instructors view hidden password fields?
Hidden password fields remain masked during normal observation.
Should I use my personal account?
Follow the instructions provided in your course guide. Some lab modules require learners to use their own account with an external service.
Is it safe to use my account in the lab environment?
The lab environment is designed to provide practical, hands-on training using real-world technologies.
As with any computer you use, follow good security practices, verify the websites you access, and avoid leaving sensitive information visible on the screen while receiving live assistance.
Comments