Which of the following is the BEST method to demonstrate assurance in the cloud services to multiple cloud customers?

• A.Provider's financial stability report and market value
• B.Reputation of the service provider in the industry
• C.Provider self-assessment and technical documents
• D.External attestation and certification audit reports

Comment: *

Name: *

Email: *

Verification: *

When using a SaaS solution, who is responsible for application security?

• A.The cloud service provider only
• B.The cloud service consumer only
• C.Both cloud consumer and the enterprise
• D.Both cloud provider and the consumer

Comment: *

Name: *

Email: *

Verification: *

DevSecOps aims to integrate security tools and processes directly into the software development life cycle and should be done:

• A.at the end of the development cycle.
• B.after go-live.
• C.in all development steps.
• D.at the beginning of the development cycle.

Comment: *

Name: *

Email: *

Verification: *

The Cloud Octagon Model was developed to support organizations':

• A.risk treatment methodology.
• B.incident detection methodology.
• C.incident response methodology.
• D.risk assessment methodology.

Comment: *

Name: *

Email: *

Verification: *

A new company has all its operations in the cloud. Which of the following would be the BEST information security control framework to implement?

• A.NIST 800-73, because it is a control framework implemented by the main cloud providers
• B.ISO/IEC 27018
• C.ISO/IEC 27002
• D.(S) Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM)

Comment: *

Name: *

Email: *

Verification: *