Which of the following service offerings in a typical Infrastructure as a Service (IaaS) model will BEST enable a cloud service provider to assist customers when recovering from a security incident?

• A.Availability of current infrastructure documentation
• B.Capability to take a snapshot of virtual machines
• C.Availability of web application firewall logs
• D.Capability of online virtual machine analysis

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important to keep in mind when assessing the value of information?

• A.The potential financial loss
• B.The cost of recreating the information
• C.The cost of insurance coverage
• D.Regulatory requirement

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST method to securely transfer a message?

• A.Password-protected removable media
• B.Facsimile transmission in a secured room
• C.Using public key infrastructure (PKI) encryption
• D.Steganography

Comment: *

Name: *

Email: *

Verification: *

When segregation of duties concerns exists between IT support staff and end users, what would be a suitable compensating control?

• A.Restricting physical access to computing equipment
• B.Reviewing transaction and application logs
• C.Performing background checks prior to hiring IT staff
• D.Locking user sessions after a specified period of inactivity

Comment: *

Name: *

Email: *

Verification: *

Which of the following will BEST provide an organization with ongoing assurance of the information security services provided by a cloud provider?

• A.Continuous monitoring of An information security risk profile
• B.Ensuring the provider's roles and responsibilities are established
• C.Requiring periodic self-assessments by the provider
• D.Evaluating the provider s security incident response plan

Comment: *

Name: *

Email: *

Verification: *