The Cloud Octagon Model was developed to support organizations:

• A.incident response methodology.
• B.risk treatment methodology.
• C.risk assessment methodology.
• D.incident detection methodology.

Comment: *

Name: *

Email: *

Verification: *

How does virtualized storage help avoid data loss if a drive fails?

• A.Full back ups weekly
• B.Drives are backed up, swapped, and archived constantly
• C.Data loss is unavoidable with drive failures
• D.Multiple copies indifferent locations
• E.Incremental backups daily

Comment: *

Name: *

Email: *

Verification: *

Cloud Control Matrix (CCM) controls can be used by cloud customers to:

• A.facilitate communication with their legal department.
• B.build an operational cloud risk management program.
• C.define different control frameworks for different cloud service providers.
• D.develop new security baselines for the industry.

Comment: *

Name: *

Email: *

Verification: *

An auditor identifies that a CSP received multiple customer inquiries and RFPs during the last month. Which of the following should be the BEST recommendation to reduce the CSP burden?

• A.CSP can direct all customers' inquiries to the information in the CSA STAR registry.
• B.CSP can share all security reports with customers to streamline the process.
• C.CSP can answer each customer individually.
• D.CSP can schedule a call with each customer.

Comment: *

Name: *

Email: *

Verification: *

Changes to which of the following will MOST likely influence the expansion or reduction of controls required to remediate the risk arising from changes to an organization's SaaS vendor?

• A.Contractual requirements
• B.Risk exceptions policy
• C.Board oversight
• D.Risk appetite

Comment: *

Name: *

Email: *

Verification: *