Cloud Practice Exam 1

#1. Multitenant environments; multiple customers will share the underlying resources that are owned and operated by the provider.

Public Cloud

IaaS

PaaS

Private Cloud

SaaS

#2. Google Docs, Microsoft’s Office 365, and QuickBooks Online are all examples of what Cloud Service?

PaaS

IaaS

SaaS

NIST

#3. Which of the following is NOT a Cloud security model?

Reference architectures

Cloud Management Plane Framework

Controls models or frameworks

Design patterns

Conceptual models or frameworks

#4. The cloud customer is basically only involved in uploading and processing data in the production environment

PaaS

SaaS

IaaS

Data discovery

#5. Detects application vulnerabilities by scanning the source code and binaries to detect problems before the code is loaded into memory and run

Static application security testing (SAST)

Dynamic Application Security Testing (DAST)

Encrypting Application security testing (EAST)

#6. Actively scans running applications with penetration tests to detect possible security vulnerabilities.

Static application security testing (SAST)

Dynamic Application Security Testing (DAST)

Encryption Application security testing (EAST)

#7. The transfer of data from the European Union to the US,It addresses concerns regarding the expansive data collection activities of U.S. intelligence agencies.

The Trans-Atlantic Data Privacy Framework

Network Information Security (NIS) Directive

EU GDPR

Personal Information Protection and Electronic Documents Act (PIPEDA

#8. The Cloud Security Alliance provides two tools for cloud security concepts and principles. (Choose Two)

Select all that apply:

Content Delivery Network (CDN)

Cloud Controls Matrix (CCM)

Cloud Access Security Brokers (CASB)

Consensus Assessment Initiative Questionnaire (CAIQ)

#9. Replacing sensitive data with unique identification symbols is known as?

Randomization

Masking

Tokenization

obfuscation

#10. Transparent Database Encryption (TDE) is used in which of the Cloud Service Models.

IaaS

SaaS

Private Cloud

PaaS

#11. Cloud vendor becomes responsible for administering, patching, and updating this software as well as all the infrastructure, computer and storage needs.

NaaS

SaaS

IaaS

PaaS

#12. Experiences Data lock-in, in the same way as in SaaS, but in this case the onus is completely on the customer to create compatible export routines.

PaaS

IaaS

SaaS

Community Cloud

#13. The protocols and mechanisms that provide the interface between the infrastructure layer and the other layers.

Metastructure:

Infostructure

Applistructure

Infrastructure

#14. Targets US financial and insurance institutions and requires them to protect account holders’ private information.

Sarbanes–Oxley Act (SOX)

FIPS 140-5

NIST 800-53

FIPS 140-2

Gramm-Leach-Bliley Act

#15. A standard template for cloud providers to document their security and compliance controls is known as?

Cloud Access Security Broker (CASB)

Consensus Assessment Initiative Questionnaire (CAIQ)

Cloud Controls Matrix (CCM

Content Delivery Network (CDN)

#16. Which of the following is not a method of enforcing Lifecycle Management Security?

Managing data location/residency

Backups and business continuity

Ensuring compliance

Dynamic masking

#17. What are the components of IaaS Encryption (choose all that apply)

Select all that apply:

Client-side encryption

Instance-managed encryption:

Externally managed encryption

Server-side encryption

Application layer encryption

#18. Which of the four methods is not a potential options for handling key management?

hardware security module (HSM)

Virtual appliance/software

Proxy encryption

Cloud provider service

Hybrid

#19. Used for publicly high-level report by an independent CPA, a SOC engagement was performed.

SOC 2

SOC 1

SOC 3

Type 2

Type 1

#20. What are the components of PaaS Encryption (choose all that apply)

Select all that apply:

Application layer encryption

Proxy encryption

Provider-managed encryption

Database encryption

#21. Which of the following is not one of the five Cloud Characteristics?

They are all Cloud Characteristics

Measured or “metered” service

Broad network access

Rapid elasticity

On-demand self-service

Resource pooling

#22. a visual representation that helps to illustrate the expected relationship between cause and effect in a financial context

Reference Model

Controls Matrix Model

Conceptual Model

Controls model

#23. The cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services.

Private Cloud

Public Cloud

Hybrid Cloud

Community Cloud

#24. Egress Monitoring (DLP) address which of the following?

Select all that apply:

Additional Security

Encryption Enforcement

Enhanced Monitoring

Regulatory Compliance

Policy Enforcement

#25. Categorized and detail specific cloud security controls or categories of controls, such as the CSA CCM

Controls models or frameworks

Reference architectures

Conceptual models or frameworks

Design patterns

#26. Full application that’s managed and hosted by the provider. Consumers access it with a web browser, mobile app, or a lightweight client app.

Public Cloud

SaaS

IaaS

PaaS

#27. In Cloud Data Access Controls the management plane consist of the following.

Controls for managing access of users that directly access the cloud platform’s management plane

data is shared externally to the public or partners that don’t have direct access to the cloud platform, t

applications on the cloud platform to design and implement your own controls to manage access

#28. Legal Frameworks Governing Data Protection and Privacy are rooted primarily in location of cloud provider,cloud user, data subject and servers, True or False?

True

False

#29. The Act on the Protection of Personal Information (APPI), adopted as early as 2003, was one of the first data protection regulations in Asia.

Japan

United States

Russia

Europe

Canada

#30. The key difference between cloud and traditional computing is the metastructure. True or False.

False

True

#31. One of the core tenants of risk management is that you can manage, transfer, accept, or avoid risks. True or False

False

True

#32. Outsourcing Key Management Keys should be stored with the data they’re protecting. True or False

True

False

#33. A content delivery network (CDN) is a form of data caching, usually near geophysical locations of high use/demand, for copies of data commonly requested by user. True or False

True

False

#34. A guidance document with the primary goal of ensuring that appropriate security requirements and controls are applied to all US federal government information in information management systems

NIST 800-53

Sarbanes–Oxley Act (SOX)

Payment Card industry (PCI)

SOC 1

Gramm-Leach-Bliley Act

#35. Removing the telltale nonspecific identifiers is called? (Data must be marked as sensitive when it is created)

Anonymization

Masking

Randomization

Obfuscation

Refresh The Page to Try Again!!!

#1. Multitenant environments; multiple customers will share the underlying resources that are owned and operated by the provider.

#2. Google Docs, Microsoft’s Office 365, and QuickBooks Online are all examples of what Cloud Service?

#3. Which of the following is NOT a Cloud security model?

#4. The cloud customer is basically only involved in uploading and processing data in the production environment

#5. Detects application vulnerabilities by scanning the source code and binaries to detect problems before the code is loaded into memory and run

#6. Actively scans running applications with penetration tests to detect possible security vulnerabilities.

#7. The transfer of data from the European Union to the US,It addresses concerns regarding the expansive data collection activities of U.S. intelligence agencies.

#8. The Cloud Security Alliance provides two tools for cloud security concepts and principles. (Choose Two)

#9. Replacing sensitive data with unique identification symbols is known as?

#10. Transparent Database Encryption (TDE) is used in which of the Cloud Service Models.

#11. Cloud vendor becomes responsible for administering, patching, and updating this software as well as all the infrastructure, computer and storage needs.

#12. Experiences Data lock-in, in the same way as in SaaS, but in this case the onus is completely on the customer to create compatible export routines.

#13. The protocols and mechanisms that provide the interface between the infrastructure layer and the other layers.

#14. Targets US financial and insurance institutions and requires them to protect account holders’ private information.

#15. A standard template for cloud providers to document their security and compliance controls is known as?

#16. Which of the following is not a method of enforcing Lifecycle Management Security?

#17. What are the components of IaaS Encryption (choose all that apply)

#18. Which of the four methods is not a potential options for handling key management?

#19. Used for publicly high-level report by an independent CPA, a SOC engagement was performed.

#20. What are the components of PaaS Encryption (choose all that apply)

#21. Which of the following is not one of the five Cloud Characteristics?

#22. a visual representation that helps to illustrate the expected relationship between cause and effect in a financial context

#23. The cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services.

#24. Egress Monitoring (DLP) address which of the following?

#25. Categorized and detail specific cloud security controls or categories of controls, such as the CSA CCM

#26. Full application that’s managed and hosted by the provider. Consumers access it with a web browser, mobile app, or a lightweight client app.

#27. In Cloud Data Access Controls the management plane consist of the following.

#28. Legal Frameworks Governing Data Protection and Privacy are rooted primarily in location of cloud provider,cloud user, data subject and servers, True or False?

#29. The Act on the Protection of Personal Information (APPI), adopted as early as 2003, was one of the first data protection regulations in Asia.

#30. The key difference between cloud and traditional computing is the metastructure. True or False.

#31. One of the core tenants of risk management is that you can manage, transfer, accept, or avoid risks. True or False

#32. Outsourcing Key Management Keys should be stored with the data they’re protecting. True or False

#33. A content delivery network (CDN) is a form of data caching, usually near geophysical locations of high use/demand, for copies of data commonly requested by user. True or False

#34. A guidance document with the primary goal of ensuring that appropriate security requirements and controls are applied to all US federal government information in information management systems

#35. Removing the telltale nonspecific identifiers is called? (Data must be marked as sensitive when it is created)

Results

Cloud Practice Exam 1

Refresh The Page to Try Again!!!

#1. Multitenant environments; multiple customers will share the underlying resources that are owned and operated by the provider.

#2. Google Docs, Microsoft’s Office 365, and QuickBooks Online are all examples of what Cloud Service?

#3. Which of the following is NOT a Cloud security model?

#4. The cloud customer is basically only involved in uploading and processing data in the production environment

#5. Detects application vulnerabilities by scanning the source code and binaries to detect problems before the code is loaded into memory and run

#6. Actively scans running applications with penetration tests to detect possible security vulnerabilities.

#7. The transfer of data from the European Union to the US,It addresses concerns regarding the expansive data collection activities of U.S. intelligence agencies.

#8. The Cloud Security Alliance provides two tools for cloud security concepts and principles. (Choose Two)

#9. Replacing sensitive data with unique identification symbols is known as?

#10. Transparent Database Encryption (TDE) is used in which of the Cloud Service Models.

#11. Cloud vendor becomes responsible for administering, patching, and updating this software as well as all the infrastructure, computer and storage needs.

#12. Experiences Data lock-in, in the same way as in SaaS, but in this case the onus is completely on the customer to create compatible export routines.

#13. The protocols and mechanisms that provide the interface between the infrastructure layer and the other layers.

#14. Targets US financial and insurance institutions and requires them to protect account holders’ private information.

#15. A standard template for cloud providers to document their security and compliance controls is known as?

#16. Which of the following is not a method of enforcing Lifecycle Management Security?

#17. What are the components of IaaS Encryption (choose all that apply)

#18. Which of the four methods is not a potential options for handling key management?

#19. Used for publicly high-level report by an independent CPA, a SOC engagement was performed.

#20. What are the components of PaaS Encryption (choose all that apply)

#21. Which of the following is not one of the five Cloud Characteristics?

#22. a visual representation that helps to illustrate the expected relationship between cause and effect in a financial context

#23. The cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services.

#24. Egress Monitoring (DLP) address which of the following?

#25. Categorized and detail specific cloud security controls or categories of controls, such as the CSA CCM

#26. Full application that’s managed and hosted by the provider. Consumers access it with a web browser, mobile app, or a lightweight client app.

#27. In Cloud Data Access Controls the management plane consist of the following.

#28. Legal Frameworks Governing Data Protection and Privacy are rooted primarily in location of cloud provider,cloud user, data subject and servers, True or False?

#29. The Act on the Protection of Personal Information (APPI), adopted as early as 2003, was one of the first data protection regulations in Asia.

#30. The key difference between cloud and traditional computing is the metastructure. True or False.

#31. One of the core tenants of risk management is that you can manage, transfer, accept, or avoid risks. True or False

#32. Outsourcing Key Management Keys should be stored with the data they’re protecting. True or False

#33. A content delivery network (CDN) is a form of data caching, usually near geophysical locations of high use/demand, for copies of data commonly requested by user. True or False

#34. A guidance document with the primary goal of ensuring that appropriate security requirements and controls are applied to all US federal government information in information management systems

#35. Removing the telltale nonspecific identifiers is called? (Data must be marked as sensitive when it is created)

Results

Share this: