To assist an organization with planning a cloud migration strategy to execution, an auditor should recommend the use of:

• A.service-oriented architecture.
• B.software architecture.
• C.enterprise architecture.
• D.object-oriented architecture.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

• A.None of the above.
• B.Greater reliance on contracts, audits, and assessments due to lack of visibility or management.
• C.Decreased requirement for proactive management of relationship and adherence to contracts.
• D.Increased need, but reduction in costs, for managing risks accepted by the cloud provider.
• E.More physical control over assets and processes.

Comment: *

Name: *

Email: *

Verification: *

Which attack surfaces, if any, does virtualization technology introduce?

• A.Configuration and VM sprawl issues
• B.Virtualization management components apart from the hypervisor
• C.All of the above
• D.The hypervisor

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST recommendation to offer an organization's HR department planning to adopt a new public SaaS application to ease the recruiting process?

• A.Ensure HIPAA compliance
• B.Implement a cloud access security broker
• C.Do not allow data to be in cleratext
• D.Consult the legal department

Comment: *

Name: *

Email: *

Verification: *

A CSP contracts for a penetration test to be conducted on its infrastructures. The auditor engages the target with no prior knowledge of its defenses, assets, or channels. The CSP's security operation center is not notified in advance of the scope of the audit and the test vectors. Which mode is selected by the CSP?

• A.Double blind
• B.Tandem
• C.Double gray box
• D.Reversal

Comment: *

Name: *

Email: *

Verification: *