Results
You’re not ready,
Back to the Books
HD Quiz powered by harmonic design
#1. In which phase of the Data Lifecycle does Classifications and Entitlements occur?
#2. Cloud services offered by a provider to a limited and well-defined number of parties. is defined as which.
#3. Which of the following is not a tool for Cloud Governance?
#4. Data classification will often rely on metadata (data about the data) such as tags and labels that define the classification level of the data and how it should be handled and controlled. True or False.
#5. This classification approach inspects and interprets data looking for known sensitive data.
#6. Which of the following is not one of the five Trust Services Criteria that a CSP will attest to.
#7. a service exposed by the provider, where the customer doesn’t manage any of the underlying hardware or virtual machines and simply accesses exposed function is known as a?
#8. When object storage is used as the back-end for an application (including mobile applications), encrypt the data using an encryption engine embedded in the application or client is known as.
#9. Substantive testing, looks at the accuracy and integrity of transactions that go through processes and information systems. True or False
#10. A PaaS vendor will let you VA test your application code and test their platform as well. True or False
#11. Can be used to identify the virtual drives that can be accessed within a zone.
#12. Combines both device and user authentication to provision network access to resources dynamically.
#13. To Secure the Management Plane a Provider must include the following, except?
#14. This classification approach looks at application, storage location, or the creator of the data as an indicator of sensitive information.
#15. When it comes to Application security how would you prevent data modification.
#16. Both China and Russia require that user data be localized. True or False
#17. Compute virtualization abstracts the running of code (including operating systems) from the underlying hardware. True or False
#18. When it comes to Application security how would you prevent Elevation of Privilege.
#19. Which of the following is not one of the four NIST/ISO/IEC deployment models.
#20. The ability to move from one environment to another with minimal changes required is called.
#21. Since volatile memory can hold a lot of sensitive data, who is responsible for securing or isolating this data from the environment.
#22. Substantive testing is used to determine whether controls have been properly designed and implemented. True or False
#23. In order to implement the Immutable Workloads approach you would need the following except.
#24. What does AICPA’s five Trust Services Criteria consist of?
#25. Which of the following is incorrect as it pertains to SaaS cloud service responsibilities.
#26. Which of the following is not a benefit of SDN Security.
#27. Compliance testing looks at the accuracy and integrity of transactions that go through processes and information systems. True or False
#28. Of the cloud service models who is responsible for physical security on premises.
#29. Container systems usually consist of the following except.
#30. In which phase of the Data Lifecycle deploys an Access Controls list and Rights Management?
#31. In which phase of the Data Lifecycle does encryption at rest occur?
#32. For cloud overlay networks, in order to span multiple physical networks across a wide area network you can implement which of the following.
#33. Volatile memory contains all kinds of potentially sensitive information, who responsible for ensuring strong isolation of volatile memory in the cloud.
#34. Responsibilities and mechanisms for governance are defined in the contract, as with any business relationship. True or False
#35. You have a access security concern that is not covered in the contract and no way to enforce it, this is know as a.
