Cloud Practice Exam 2

#1. For cloud overlay networks, in order to span multiple physical networks across a wide area network you can implement which of the following.

VXLAN

SDN

CDN

a Proxy forwarder

#2. Which of the following is NOT considered a part of Common Criteria?

Organization and Management

Logical and Physical Access Controls

Management Plane API's

Risk Management and Design and Implementation of Controls

Communications

Systems Operations

#3. Which Layer of the SAN does network devices include switches, routers, bridges, gateways, and even cables reside?

Storage Layer

Fabric Layer

Host Layer

Management Layer

#4. Substantive testing is used to determine whether controls have been properly designed and implemented. True or False

True

False

#5. Cloud services offered by a provider to a limited and well-defined number of parties. is defined as which.

Public cloud

Private Cloud

Community Cloud

Partner Cloud

#6. Can be used to identify the virtual drives that can be accessed within a zone.

Zoning

LUN Masking

Using Agents

Zeroing

#7. Full DRM and Provider-based control are both aspects of.

Data Loss Prevention

Enterprise Rights Management

Enforcing Lifecycle Management Security

Provider-managed encryption

#8. Which of the following is not true?

SOC 2 This report is titled “Report on Controls at a Service.

SOC 3 is a publicly available high-level SOC report.

Type 1 A point-in-time look at the design of the controls

Type 2 is used for Internal Control over Financial Reporting

#9. Data owners are expected to select the appropriate classification for a particular data set.

User-based

Content-based

Context-based

Access-based

#10. When using immutable servers, you should disable remote access and integrate file integrity monitoring because nothing in the running instances should change. True or False.

True

False

#11. a service exposed by the provider, where the customer doesn’t manage any of the underlying hardware or virtual machines and simply accesses exposed function is known as a?

Serverless Computing

Immutable Workload

Software Defined Network.

VXLAN

#12. When it comes to Application security how would you prevent the threat of repudiation

Rate Throttling

Audit Logging

Authentication

Encryption

input validation

#13. Software Defined Network consist of which three planes except.

Control

Management

Physical (Hardware)

Virtual

#14. Which of the following is incorrect as it pertains to SaaS cloud service responsibilities.

Provider is responsible for Application Security

Provider is responsible for Network Security

Provider is responsible for Data Governance

Provider is responsible for Operating System

Provider is responsible off-premise physical Security

#15. Allows for a logical grouping of ports or nodes that restricts certain hosts to accessing only specified storage devices

LUN Masking

Scaling

Zoning

Obfuscating

#16. Which of the following is not a benefit of SDN Security.

SDN firewalls

Deny by Default

Identification tags

Enhanced IDS

Denying Network attacks

Isolation

#17. The CCM and EU GDPR are best practices and/or standards that can be leveraged to create a cloud governance framework. True or False?

False

True

#18. In order to implement the Immutable Workloads approach you would need the following except.

A provider that supports this approach

Determine how security testing of the images themselves will be performed

Logging and log retention

appropriate asset management

All of these will be required.

#19. When it comes to Application security how would you prevent information disclosure?

Audit logging

input validation

encryption

rate throttling

Authentication.

#20. With securing data in the cloud Access controls and encryption are the core data security controls in use. True or False

True

False

#21. Since volatile memory can hold a lot of sensitive data, who is responsible for securing or isolating this data from the environment.

Customer

Provider

Both

#22. The ability for system components to work together to deliver a service is called.

Data Mobility

Portability

Interoperability

Lock-In

#23. This classification approach looks at application, storage location, or the creator of the data as an indicator of sensitive information.

Module-Based

User-Based

Content-Based

Context-Based

#24. Performing Vulnerability assessments with agents installed on the server is the best approach in cloud security. True or False

True

False

#25. In order to create a logical drive on 100TB hard-drive and have it be identified as a separate drive what would you use?

LUN

FCoE

iSCSI

MAC ID

#26. In a Immutable environment, It is best practice, to get logs off servers and on to a centralized location as quickly as possible, because all servers must be considered ephemeral in the cloud. True or False

False

True

#27. Replacing an exploited server with a newly patched server to stave off an attack is an example of which.

Immutable Workload

SDN

VXLAN

Serverless Computing

#28. Software Defined Networks (SDN) offers the ability to maintain segregation and isolation for the multitenant environment. True or False

True

False

#29. In which phase of the Data Lifecycle employs encryption in transit, application security and data loss prevention?

#30. By placing an encryption proxy in a trusted area between the cloud user and the cloud provider you will ensure the data transfer is secure, True or False

False

True

#31. What are the two main protocols used in SAN Traffic.

Select all that apply:

TCP

UDP

FCoE

iSCSI

#32. Compliance testing looks at the accuracy and integrity of transactions that go through processes and information systems. True or False

True

False

#33. Container systems usually consist of the following except.

VLAN controller

Orchestration and scheduling controller

Container

Image repository

Engine

#34. Data classification will often rely on metadata (data about the data) such as tags and labels that define the classification level of the data and how it should be handled and controlled. True or False.

False

True

#35. Three layers of a SAN include all except.

Host Layer

Fabric Layer

Mac Layer

Storage Layer

Refresh the Page to Try Again!!!

Results

#1. For cloud overlay networks, in order to span multiple physical networks across a wide area network you can implement which of the following.

#2. Which of the following is NOT considered a part of Common Criteria?

#3. Which Layer of the SAN does network devices include switches, routers, bridges, gateways, and even cables reside?

#4. Substantive testing is used to determine whether controls have been properly designed and implemented. True or False

#5. Cloud services offered by a provider to a limited and well-defined number of parties. is defined as which.

#6. Can be used to identify the virtual drives that can be accessed within a zone.

#7. Full DRM and Provider-based control are both aspects of.

#8. Which of the following is not true?

#9. Data owners are expected to select the appropriate classification for a particular data set.

#10. When using immutable servers, you should disable remote access and integrate file integrity monitoring because nothing in the running instances should change. True or False.

#11. a service exposed by the provider, where the customer doesn’t manage any of the underlying hardware or virtual machines and simply accesses exposed function is known as a?

#12. When it comes to Application security how would you prevent the threat of repudiation

#13. Software Defined Network consist of which three planes except.

#14. Which of the following is incorrect as it pertains to SaaS cloud service responsibilities.

#15. Allows for a logical grouping of ports or nodes that restricts certain hosts to accessing only specified storage devices

#16. Which of the following is not a benefit of SDN Security.

#17. The CCM and EU GDPR are best practices and/or standards that can be leveraged to create a cloud governance framework. True or False?

#18. In order to implement the Immutable Workloads approach you would need the following except.

#19. When it comes to Application security how would you prevent information disclosure?

#20. With securing data in the cloud Access controls and encryption are the core data security controls in use. True or False

#21. Since volatile memory can hold a lot of sensitive data, who is responsible for securing or isolating this data from the environment.

#22. The ability for system components to work together to deliver a service is called.

#23. This classification approach looks at application, storage location, or the creator of the data as an indicator of sensitive information.

#24. Performing Vulnerability assessments with agents installed on the server is the best approach in cloud security. True or False

#25. In order to create a logical drive on 100TB hard-drive and have it be identified as a separate drive what would you use?

#26. In a Immutable environment, It is best practice, to get logs off servers and on to a centralized location as quickly as possible, because all servers must be considered ephemeral in the cloud. True or False

#27. Replacing an exploited server with a newly patched server to stave off an attack is an example of which.

#28. Software Defined Networks (SDN) offers the ability to maintain segregation and isolation for the multitenant environment. True or False

#29. In which phase of the Data Lifecycle employs encryption in transit, application security and data loss prevention?

#30. By placing an encryption proxy in a trusted area between the cloud user and the cloud provider you will ensure the data transfer is secure, True or False

#31. What are the two main protocols used in SAN Traffic.

#32. Compliance testing looks at the accuracy and integrity of transactions that go through processes and information systems. True or False

#33. Container systems usually consist of the following except.

#34. Data classification will often rely on metadata (data about the data) such as tags and labels that define the classification level of the data and how it should be handled and controlled. True or False.

#35. Three layers of a SAN include all except.

Disclaimer

Facebook

Cloud Practice Exam 2

Refresh the Page to Try Again!!!

Results

#1. For cloud overlay networks, in order to span multiple physical networks across a wide area network you can implement which of the following.

#2. Which of the following is NOT considered a part of Common Criteria?

#3. Which Layer of the SAN does network devices include switches, routers, bridges, gateways, and even cables reside?

#4. Substantive testing is used to determine whether controls have been properly designed and implemented. True or False

#5. Cloud services offered by a provider to a limited and well-defined number of parties. is defined as which.

#6. Can be used to identify the virtual drives that can be accessed within a zone.

#7. Full DRM and Provider-based control are both aspects of.

#8. Which of the following is not true?

#9. Data owners are expected to select the appropriate classification for a particular data set.

#10. When using immutable servers, you should disable remote access and integrate file integrity monitoring because nothing in the running instances should change. True or False.

#11. a service exposed by the provider, where the customer doesn’t manage any of the underlying hardware or virtual machines and simply accesses exposed function is known as a?

#12. When it comes to Application security how would you prevent the threat of repudiation

#13. Software Defined Network consist of which three planes except.

#14. Which of the following is incorrect as it pertains to SaaS cloud service responsibilities.

#15. Allows for a logical grouping of ports or nodes that restricts certain hosts to accessing only specified storage devices

#16. Which of the following is not a benefit of SDN Security.

#17. The CCM and EU GDPR are best practices and/or standards that can be leveraged to create a cloud governance framework. True or False?

#18. In order to implement the Immutable Workloads approach you would need the following except.

#19. When it comes to Application security how would you prevent information disclosure?

#20. With securing data in the cloud Access controls and encryption are the core data security controls in use. True or False

#21. Since volatile memory can hold a lot of sensitive data, who is responsible for securing or isolating this data from the environment.

#22. The ability for system components to work together to deliver a service is called.

#23. This classification approach looks at application, storage location, or the creator of the data as an indicator of sensitive information.

#24. Performing Vulnerability assessments with agents installed on the server is the best approach in cloud security. True or False

#25. In order to create a logical drive on 100TB hard-drive and have it be identified as a separate drive what would you use?

#26. In a Immutable environment, It is best practice, to get logs off servers and on to a centralized location as quickly as possible, because all servers must be considered ephemeral in the cloud. True or False

#27. Replacing an exploited server with a newly patched server to stave off an attack is an example of which.

#28. Software Defined Networks (SDN) offers the ability to maintain segregation and isolation for the multitenant environment. True or False

#29. In which phase of the Data Lifecycle employs encryption in transit, application security and data loss prevention?

#30. By placing an encryption proxy in a trusted area between the cloud user and the cloud provider you will ensure the data transfer is secure, True or False

#31. What are the two main protocols used in SAN Traffic.

#32. Compliance testing looks at the accuracy and integrity of transactions that go through processes and information systems. True or False

#33. Container systems usually consist of the following except.

#34. Data classification will often rely on metadata (data about the data) such as tags and labels that define the classification level of the data and how it should be handled and controlled. True or False.

#35. Three layers of a SAN include all except.

Share this: