Cloud Practice Exam 1

#1. The five main phases in secure application design and development include the following except.

Assign

Training

Develop

Design

Define

Test

#2. In Cloud Data Access Controls the management plane consist of the following.

data is shared externally to the public or partners that don’t have direct access to the cloud platform, t

Controls for managing access of users that directly access the cloud platform’s management plane

applications on the cloud platform to design and implement your own controls to manage access

#3. General Data Protection Regulation (GDPR) includes the following except.

Accountability Obligations

Cross-border Data Transfer Restrictions

Discrepancies among Member States:

Sanctions

Data Subjects’ Rights:

Encryption Standards

Breaches of Security

#4. Includes visualizations and descriptions used to explain cloud security concepts and principles, such as the CSA logical model in this document

Design patterns

Conceptual models or frameworks

Controls models or frameworks

Reference architectures

#5. In application security testing involves the following is true, except.

Backlogging test results

Static Application Security Testing (SAST)

Dynamic Application Security Testing (DAST)

Code Review

Unit testing, regression testing, and functional tests

#6. A content delivery network (CDN) is a form of data caching, usually near geophysical locations of high use/demand, for copies of data commonly requested by user. True or False

False

True

#7. General Data Protection Regulation (GDPR)

Applies to the processing of personal data in the Japan

Applies to the processing of personal data in the Australia

Applies to the processing of personal data in the Canada

Applies to the processing of personal data in the EU/EEA

#8. Used for an inspection of the operating effectiveness of the controls.

Type 1

SOC 1

SOC 2

SOC 3

Type 2

#9. Egress Monitoring (DLP) address which of the following?

Select all that apply:

Additional Security

Regulatory Compliance

Encryption Enforcement

Policy Enforcement

Enhanced Monitoring

#10. A community cloud can also be provisioned by a third party on behalf of the various members of the community. (FEDramp cloud) True or False?

False

True

#11. A NIST document that describes the process for accrediting and cryptosystems for use by the US federal government.

The Sarbanes–Oxley Act (SOX)

The Gramm-Leach-Bliley Act

NIST 800-53

FIPS 140-2

#12. Which of the following is NOT a Cloud security model?

Controls models or frameworks

Conceptual models or frameworks

Cloud Management Plane Framework

Design patterns

Reference architectures

#13. What are the six stages of the Data Life Cycle?

Create,Archive,Destroy,Use,Store,Share

Create,Store,Use,Share,Archive,Destroy

Archive,Destroy,Use,Store,Share,Create

Store,Share,Create,Archive,Destroy,Use

#14. Privacy laws are either Omnibus-covers all categories of personal data or sectoral;covers only specific categories of personal data. True or False

True

False

#15. The three methods of data discovery are the following.

metadata, labels, and content analysis.

Data distribution, labels and e-discovery

preservation, dispersion and replication

Dynamic. Transactional and Static

#16. The key difference between cloud and traditional computing is the metastructure. True or False.

False

True

#17. Cloud Data Storage Types include all but the following.

File Storage

Application/platform

Object storage

Volume storage

Database

#18. Full application that’s managed and hosted by the provider. Consumers access it with a web browser, mobile app, or a lightweight client app.

PaaS

Public Cloud

IaaS

SaaS

#19. Involves managing, controlling and securing content from unwanted access.

Digital rights management (DRM)

Cloud Customer

Inter-Cloud Provider

Information rights management (IRM)

#20. The replacement of the data (or part of the data) with random characters is known as?

Tokenization

Obfuscation

Hashing

Masking

Randomization

#21. Responsible for peering with other cloud services and providers, as well as overseeing and managing federations and federated services.

Cloud Broker

Cloud Service Provider (CSP)

Cloud Access Security Broker (CASB

Inter-Cloud Provider

#22. The cloud infrastructure is a composition of two or more clouds (private,community, or public) enables data and application portability.

IaaS

Community Cloud

Public Cloud

Hybrid Cloud

Private Cloud

#23. It is best practice to identify requirements, design the architecture, and then identify the gaps based on the capabilities of the underlying cloud platform. True or False

False

True

#24. What are the components of IaaS Encryption (choose all that apply)

Select all that apply:

Server-side encryption

Application layer encryption

Externally managed encryption

Instance-managed encryption:

Client-side encryption

#25. The cloud customer is basically only involved in uploading and processing data in the production environment

Data discovery

IaaS

SaaS

PaaS

#26. Protection of consumer media, such as music, publications, video, movies, and so on, is known as what.

Information Rights Management (IRM)

Metadata Rights Management (MRM)

Media Rights Management (MDM)

Data Rights Management (DRM)

#27. Offers access to a resource pool of fundamental computing infrastructure, such as compute, network, or storage.

Hybrid Cloud

IaaS

SaaS

Paas

Community Cloud

#28. The Cloud Security Alliance provides two tools for cloud security concepts and principles. (Choose Two)

Select all that apply:

Content Delivery Network (CDN)

Consensus Assessment Initiative Questionnaire (CAIQ)

Cloud Access Security Brokers (CASB)

Cloud Controls Matrix (CCM)

#29. A Cloud Access Security Broker(CASB), can handle IAM and key management services for cloud customers, True or False?

False

True

#30. The cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns. It may be managed by the organizations or by a third party and may be located on-premises or off-premises.

Private Cloud

Community Cloud

Public Cloud

Hybrid Cloud

#31. Allows customers to maintain separation between data at rest and encryption keys while still leveraging the power of cloud for compute and analytics.

Customer key management

External key management

Remote key management

Client-side key management

#32. The primary security responsibilities of the cloud provider in compute virtualization are to enforce isolation and maintain a secure virtualization infrastructure. True or False.

False

True

#33. Outsourcing Key Management Keys should be stored with the data they’re protecting. True or False

True

False

#34. The core components of a computing system: compute, network, and storage is known as?

Infostructure

Infrastructure

Applistructure

Metastructure

#35. The applications deployed in the cloud and the underlying application services used to build them.

Applistructure

Metastructure

Infrastructure

Infostructure

Refresh The Page to Try Again!!!

#1. The five main phases in secure application design and development include the following except.

#2. In Cloud Data Access Controls the management plane consist of the following.

#3. General Data Protection Regulation (GDPR) includes the following except.

#4. Includes visualizations and descriptions used to explain cloud security concepts and principles, such as the CSA logical model in this document

#5. In application security testing involves the following is true, except.

#6. A content delivery network (CDN) is a form of data caching, usually near geophysical locations of high use/demand, for copies of data commonly requested by user. True or False

#7. General Data Protection Regulation (GDPR)

#8. Used for an inspection of the operating effectiveness of the controls.

#9. Egress Monitoring (DLP) address which of the following?

#10. A community cloud can also be provisioned by a third party on behalf of the various members of the community. (FEDramp cloud) True or False?

#11. A NIST document that describes the process for accrediting and cryptosystems for use by the US federal government.

#12. Which of the following is NOT a Cloud security model?

#13. What are the six stages of the Data Life Cycle?

#14. Privacy laws are either Omnibus-covers all categories of personal data or sectoral;covers only specific categories of personal data. True or False

#15. The three methods of data discovery are the following.

#16. The key difference between cloud and traditional computing is the metastructure. True or False.

#17. Cloud Data Storage Types include all but the following.

#18. Full application that’s managed and hosted by the provider. Consumers access it with a web browser, mobile app, or a lightweight client app.

#19. Involves managing, controlling and securing content from unwanted access.

#20. The replacement of the data (or part of the data) with random characters is known as?

#21. Responsible for peering with other cloud services and providers, as well as overseeing and managing federations and federated services.

#22. The cloud infrastructure is a composition of two or more clouds (private,community, or public) enables data and application portability.

#23. It is best practice to identify requirements, design the architecture, and then identify the gaps based on the capabilities of the underlying cloud platform. True or False

#24. What are the components of IaaS Encryption (choose all that apply)

#25. The cloud customer is basically only involved in uploading and processing data in the production environment

#26. Protection of consumer media, such as music, publications, video, movies, and so on, is known as what.

#27. Offers access to a resource pool of fundamental computing infrastructure, such as compute, network, or storage.

#28. The Cloud Security Alliance provides two tools for cloud security concepts and principles. (Choose Two)

#29. A Cloud Access Security Broker(CASB), can handle IAM and key management services for cloud customers, True or False?

#30. The cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns. It may be managed by the organizations or by a third party and may be located on-premises or off-premises.

#31. Allows customers to maintain separation between data at rest and encryption keys while still leveraging the power of cloud for compute and analytics.

#32. The primary security responsibilities of the cloud provider in compute virtualization are to enforce isolation and maintain a secure virtualization infrastructure. True or False.

#33. Outsourcing Key Management Keys should be stored with the data they’re protecting. True or False

#34. The core components of a computing system: compute, network, and storage is known as?

#35. The applications deployed in the cloud and the underlying application services used to build them.

Results

Disclaimer

Facebook

Cloud Practice Exam 1

Refresh The Page to Try Again!!!

#1. The five main phases in secure application design and development include the following except.

#2. In Cloud Data Access Controls the management plane consist of the following.

#3. General Data Protection Regulation (GDPR) includes the following except.

#4. Includes visualizations and descriptions used to explain cloud security concepts and principles, such as the CSA logical model in this document

#5. In application security testing involves the following is true, except.

#6. A content delivery network (CDN) is a form of data caching, usually near geophysical locations of high use/demand, for copies of data commonly requested by user. True or False

#7. General Data Protection Regulation (GDPR)

#8. Used for an inspection of the operating effectiveness of the controls.

#9. Egress Monitoring (DLP) address which of the following?

#10. A community cloud can also be provisioned by a third party on behalf of the various members of the community. (FEDramp cloud) True or False?

#11. A NIST document that describes the process for accrediting and cryptosystems for use by the US federal government.

#12. Which of the following is NOT a Cloud security model?

#13. What are the six stages of the Data Life Cycle?

#14. Privacy laws are either Omnibus-covers all categories of personal data or sectoral;covers only specific categories of personal data. True or False

#15. The three methods of data discovery are the following.

#16. The key difference between cloud and traditional computing is the metastructure. True or False.

#17. Cloud Data Storage Types include all but the following.

#18. Full application that’s managed and hosted by the provider. Consumers access it with a web browser, mobile app, or a lightweight client app.

#19. Involves managing, controlling and securing content from unwanted access.

#20. The replacement of the data (or part of the data) with random characters is known as?

#21. Responsible for peering with other cloud services and providers, as well as overseeing and managing federations and federated services.

#22. The cloud infrastructure is a composition of two or more clouds (private,community, or public) enables data and application portability.

#23. It is best practice to identify requirements, design the architecture, and then identify the gaps based on the capabilities of the underlying cloud platform. True or False

#24. What are the components of IaaS Encryption (choose all that apply)

#25. The cloud customer is basically only involved in uploading and processing data in the production environment

#26. Protection of consumer media, such as music, publications, video, movies, and so on, is known as what.

#27. Offers access to a resource pool of fundamental computing infrastructure, such as compute, network, or storage.

#28. The Cloud Security Alliance provides two tools for cloud security concepts and principles. (Choose Two)

#29. A Cloud Access Security Broker(CASB), can handle IAM and key management services for cloud customers, True or False?

#30. The cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns. It may be managed by the organizations or by a third party and may be located on-premises or off-premises.

#31. Allows customers to maintain separation between data at rest and encryption keys while still leveraging the power of cloud for compute and analytics.

#32. The primary security responsibilities of the cloud provider in compute virtualization are to enforce isolation and maintain a secure virtualization infrastructure. True or False.

#33. Outsourcing Key Management Keys should be stored with the data they’re protecting. True or False

#34. The core components of a computing system: compute, network, and storage is known as?

#35. The applications deployed in the cloud and the underlying application services used to build them.

Results

Share this: