When deploying an application that was created using the programming language and tools supported by the cloud provider, the MOST appropriate cloud computing model for an organization to adopt is:

• A.Platform as a Service (PaaS).
• B.Identity as a Service (IDaaS).
• C.Infrastructure as a Service (laaS).
• D.Software as a Service (SaaS).

Comment: *

Name: *

Email: *

Verification: *

When deploying Security as a Service in a highly regulated industry or environment, what should bothparties agree on in advance and include in the SLA?

• A.The type of security software which meets regulations and the number of licenses that will be needed.
• B.The regulations that are pertinent to the contract and how to circumvent them.
• C.The duration of time that a security violation can occur before the client begins assessing regulatory fines.
• D.The metrics defining the service level required to achieve regulatory objectives.
• E.The cost per incident for security breaches of regulated information.

Comment: *

Name: *

Email: *

Verification: *

What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?

• A.Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.
• B.Both B and D.
• C.Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.
• D.Maintaining customer managed key management and revoking ordeleting keys from the key management system to prevent the data from being accessed again.
• E.Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.

Comment: *

Name: *

Email: *

Verification: *

How can virtual machine communications bypass network security controls?

• A.VM images can contain rootkits programmed to bypass firewalls
• B.The guest OS can invoke stealth mode
• C.VM communications may use a virtual network on the same hardware host
• D.Hypervisors depend upon multiple network interfaces
• E.Most network security systems do not recognize encrypted VM traffic

Comment: *

Name: *

Email: *

Verification: *

The Open Certification Framework is structured on three levels of trust. Those three levels of trust are:

• A.CSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR Continuous
• B.CSA STAR Audit, STAR Certification & Attestation (Third-party Assessment), STAR Continuous
• C.CSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR Monitoring and Control
• D.CSA STAR Self-Assessment, STAR Certification & Attestation (Third-party Assessment), STAR Compliance

Comment: *

Name: *

Email: *

Verification: *