Cloud Practice Exam 1

#1. What is the second stage of the data life cycle?

Share

#2. Cloud customers should also consider implementing some form of egress monitoring in during this phase.

Store

Use

Share

#3. Transparent Database Encryption (TDE) is used in which of the Cloud Service Models.

Private Cloud

PaaS

SaaS

IaaS

#4. Includes cloud-based database engines and services such as data warehousing and datamining. (Big data)

Public Cloud

IaaS

PaaS

SaaS

#5. Test data generation and Dynamic masking are techniques to protect data used in development and test environments. True or False?

False

True

#6. A set of resources (racks, blades, software packages) owned by the single customer but located and maintained at the cloud provider’s data center is a part of?

SaaS

Public Cloud

IaaS

Private Cloud

#7. The cloud infrastructure is a composition of two or more clouds (private,community, or public) enables data and application portability.

Hybrid Cloud

Community Cloud

Private Cloud

IaaS

Public Cloud

#8. The Cloud Security Alliance provides two tools for cloud security concepts and principles. (Choose Two)

Select all that apply:

Cloud Controls Matrix (CCM)

Content Delivery Network (CDN)

Cloud Access Security Brokers (CASB)

Consensus Assessment Initiative Questionnaire (CAIQ)

#9. A NIST document that describes the process for accrediting and cryptosystems for use by the US federal government.

NIST 800-53

The Gramm-Leach-Bliley Act

FIPS 140-2

The Sarbanes–Oxley Act (SOX)

#10. Detects application vulnerabilities by scanning the source code and binaries to detect problems before the code is loaded into memory and run

Encrypting Application security testing (EAST)

Static application security testing (SAST)

Dynamic Application Security Testing (DAST)

#11. A standard template for cloud providers to document their security and compliance controls is known as?

Content Delivery Network (CDN)

Cloud Controls Matrix (CCM

Cloud Access Security Broker (CASB)

Consensus Assessment Initiative Questionnaire (CAIQ)

#12. The Act on the Protection of Personal Information (APPI), adopted as early as 2003, was one of the first data protection regulations in Asia.

Europe

Russia

Japan

Canada

United States

#13. Privacy laws are either Omnibus-covers all categories of personal data or sectoral;covers only specific categories of personal data. True or False

True

False

#14. Rackspace, Microsoft’s Azure, and Amazon Web Services (AWS) are examples of?

Private Cloud

SaaS

Public Cloud

PaaS

#15. Removing the telltale nonspecific identifiers is called? (Data must be marked as sensitive when it is created)

Obfuscation

Anonymization

Masking

Randomization

#16. Infrastructure as a Service represents the closest that Cloud comes to a traditional data center True or False.

True

False

#17. The cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns. It may be managed by the organizations or by a third party and may be located on-premises or off-premises.

Public Cloud

Hybrid Cloud

Private Cloud

Community Cloud

#18. Forces executives to oversee all accounting practices, it also holds them accountable for fraudulent/deceptive activity.

Payment Card industry (PCI)

NIST 800-53

Sarbanes–Oxley Act (SOX)

Gramm-Leach-Bliley Act

Directive 95/46/EC

#19. Cloud vendor becomes responsible for administering, patching, and updating this software as well as all the infrastructure, computer and storage needs.

NaaS

IaaS

PaaS

SaaS

#20. Includes visualizations and descriptions used to explain cloud security concepts and principles, such as the CSA logical model in this document

Reference architectures

Controls models or frameworks

Design patterns

Conceptual models or frameworks

#21. A community cloud can also be provisioned by a third party on behalf of the various members of the community. (FEDramp cloud) True or False?

False

True

#22. Widely considered to be the gold standard when it comes to security of information systems and their data.

Directive 95/46/EC of the European (Data Protection Directive)

FIPS 140-2

NIST 800-53

ISO 27001, (27001:2013)

#23. ITAR is a Department of State program. EAR is a Commerce Department program, True or False?

True

False

#24. In application security testing involves the following is true, except.

Dynamic Application Security Testing (DAST)

Code Review

Static Application Security Testing (SAST)

Unit testing, regression testing, and functional tests

Backlogging test results

#25. Protection of consumer media, such as music, publications, video, movies, and so on, is known as what.

Metadata Rights Management (MRM)

Media Rights Management (MDM)

Information Rights Management (IRM)

Data Rights Management (DRM)

#26. Provides development or application platforms, such as databases, application platforms (e.g. a place to run Python, PHP, or other code),

Private Cloud

Paas

IaaS

SaaS

Community Cloud

#27. The five main phases in secure application design and development include the following except.

Define

Assign

Test

Develop

Training

Design

#28. In Cloud Data Access Controls the management plane consist of the following.

data is shared externally to the public or partners that don’t have direct access to the cloud platform, t

applications on the cloud platform to design and implement your own controls to manage access

Controls for managing access of users that directly access the cloud platform’s management plane

#29. Acts as the glue that binds the technologies together and enables management and configuration remotely of a customer’s cloud environment.

Metastructure

Applistructure

Infostructure

Infastructure

#30. Cloud Data Access Controls include all but the following.

Application level controls

Private Access Controls

Public and internal sharing controls

Management plane

#31. Which of the following is not one of the five Cloud Characteristics?

Rapid elasticity

Broad network access

They are all Cloud Characteristics

On-demand self-service

Measured or “metered” service

Resource pooling

#32. Which of the following is incorrect, with regards to data storage?

CDN stores data in caches of copied content near locations of high demand

Object-based storage stores data as objects in a volume, with labels and metadata.

File-based is a cloud storage architecture that manages the data in a hierarchy of files.

None, they are all correct

Databases store data in fields, in a relational motif.

#33. A customer uses Private cloud resources for their legacy production environment, accessed remotely by their users, but also employs PaaS function for software development/testing, away from the production environment.

Public Cloud

Hybrid Cloud

IaaS

Community Cloud

Private Cloud

#34. Reusable solutions to particular problems. In security, an example is IaaS log management.

Conceptual models or frameworks

Design patterns

Controls models or frameworks

Reference architectures

#35. Responsible for peering with other cloud services and providers, as well as overseeing and managing federations and federated services.

Inter-Cloud Provider

Cloud Service Provider (CSP)

Cloud Broker

Cloud Access Security Broker (CASB

Refresh The Page to Try Again!!!

#1. What is the second stage of the data life cycle?

#2. Cloud customers should also consider implementing some form of egress monitoring in during this phase.

#3. Transparent Database Encryption (TDE) is used in which of the Cloud Service Models.

#4. Includes cloud-based database engines and services such as data warehousing and datamining. (Big data)

#5. Test data generation and Dynamic masking are techniques to protect data used in development and test environments. True or False?

#6. A set of resources (racks, blades, software packages) owned by the single customer but located and maintained at the cloud provider’s data center is a part of?

#7. The cloud infrastructure is a composition of two or more clouds (private,community, or public) enables data and application portability.

#8. The Cloud Security Alliance provides two tools for cloud security concepts and principles. (Choose Two)

#9. A NIST document that describes the process for accrediting and cryptosystems for use by the US federal government.

#10. Detects application vulnerabilities by scanning the source code and binaries to detect problems before the code is loaded into memory and run

#11. A standard template for cloud providers to document their security and compliance controls is known as?

#12. The Act on the Protection of Personal Information (APPI), adopted as early as 2003, was one of the first data protection regulations in Asia.

#13. Privacy laws are either Omnibus-covers all categories of personal data or sectoral;covers only specific categories of personal data. True or False

#14. Rackspace, Microsoft’s Azure, and Amazon Web Services (AWS) are examples of?

#15. Removing the telltale nonspecific identifiers is called? (Data must be marked as sensitive when it is created)

#16. Infrastructure as a Service represents the closest that Cloud comes to a traditional data center True or False.

#17. The cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns. It may be managed by the organizations or by a third party and may be located on-premises or off-premises.

#18. Forces executives to oversee all accounting practices, it also holds them accountable for fraudulent/deceptive activity.

#19. Cloud vendor becomes responsible for administering, patching, and updating this software as well as all the infrastructure, computer and storage needs.

#20. Includes visualizations and descriptions used to explain cloud security concepts and principles, such as the CSA logical model in this document

#21. A community cloud can also be provisioned by a third party on behalf of the various members of the community. (FEDramp cloud) True or False?

#22. Widely considered to be the gold standard when it comes to security of information systems and their data.

#23. ITAR is a Department of State program. EAR is a Commerce Department program, True or False?

#24. In application security testing involves the following is true, except.

#25. Protection of consumer media, such as music, publications, video, movies, and so on, is known as what.

#26. Provides development or application platforms, such as databases, application platforms (e.g. a place to run Python, PHP, or other code),

#27. The five main phases in secure application design and development include the following except.

#28. In Cloud Data Access Controls the management plane consist of the following.

#29. Acts as the glue that binds the technologies together and enables management and configuration remotely of a customer’s cloud environment.

#30. Cloud Data Access Controls include all but the following.

#31. Which of the following is not one of the five Cloud Characteristics?

#32. Which of the following is incorrect, with regards to data storage?

#33. A customer uses Private cloud resources for their legacy production environment, accessed remotely by their users, but also employs PaaS function for software development/testing, away from the production environment.

#34. Reusable solutions to particular problems. In security, an example is IaaS log management.

#35. Responsible for peering with other cloud services and providers, as well as overseeing and managing federations and federated services.

Results

Disclaimer

Facebook

Cloud Practice Exam 1

Refresh The Page to Try Again!!!

#1. What is the second stage of the data life cycle?

#2. Cloud customers should also consider implementing some form of egress monitoring in during this phase.

#3. Transparent Database Encryption (TDE) is used in which of the Cloud Service Models.

#4. Includes cloud-based database engines and services such as data warehousing and datamining. (Big data)

#5. Test data generation and Dynamic masking are techniques to protect data used in development and test environments. True or False?

#6. A set of resources (racks, blades, software packages) owned by the single customer but located and maintained at the cloud provider’s data center is a part of?

#7. The cloud infrastructure is a composition of two or more clouds (private,community, or public) enables data and application portability.

#8. The Cloud Security Alliance provides two tools for cloud security concepts and principles. (Choose Two)

#9. A NIST document that describes the process for accrediting and cryptosystems for use by the US federal government.

#10. Detects application vulnerabilities by scanning the source code and binaries to detect problems before the code is loaded into memory and run

#11. A standard template for cloud providers to document their security and compliance controls is known as?

#12. The Act on the Protection of Personal Information (APPI), adopted as early as 2003, was one of the first data protection regulations in Asia.

#13. Privacy laws are either Omnibus-covers all categories of personal data or sectoral;covers only specific categories of personal data. True or False

#14. Rackspace, Microsoft’s Azure, and Amazon Web Services (AWS) are examples of?

#15. Removing the telltale nonspecific identifiers is called? (Data must be marked as sensitive when it is created)

#16. Infrastructure as a Service represents the closest that Cloud comes to a traditional data center True or False.

#17. The cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns. It may be managed by the organizations or by a third party and may be located on-premises or off-premises.

#18. Forces executives to oversee all accounting practices, it also holds them accountable for fraudulent/deceptive activity.

#19. Cloud vendor becomes responsible for administering, patching, and updating this software as well as all the infrastructure, computer and storage needs.

#20. Includes visualizations and descriptions used to explain cloud security concepts and principles, such as the CSA logical model in this document

#21. A community cloud can also be provisioned by a third party on behalf of the various members of the community. (FEDramp cloud) True or False?

#22. Widely considered to be the gold standard when it comes to security of information systems and their data.

#23. ITAR is a Department of State program. EAR is a Commerce Department program, True or False?

#24. In application security testing involves the following is true, except.

#25. Protection of consumer media, such as music, publications, video, movies, and so on, is known as what.

#26. Provides development or application platforms, such as databases, application platforms (e.g. a place to run Python, PHP, or other code),

#27. The five main phases in secure application design and development include the following except.

#28. In Cloud Data Access Controls the management plane consist of the following.

#29. Acts as the glue that binds the technologies together and enables management and configuration remotely of a customer’s cloud environment.

#30. Cloud Data Access Controls include all but the following.

#31. Which of the following is not one of the five Cloud Characteristics?

#32. Which of the following is incorrect, with regards to data storage?

#33. A customer uses Private cloud resources for their legacy production environment, accessed remotely by their users, but also employs PaaS function for software development/testing, away from the production environment.

#34. Reusable solutions to particular problems. In security, an example is IaaS log management.

#35. Responsible for peering with other cloud services and providers, as well as overseeing and managing federations and federated services.

Results

Share this: