Which of the following threat types can occur when baselines are not appropriately applied or when unauthorized changes are made?

• A.Security misconfiguration
• B.Insecure direct object references
• C.Unvalidated redirects and forwards
• D.Sensitive data exposure

Comment: *

Name: *

Email: *

Verification: *

Before deploying a specific brand of virtualization toolset, it is important to configure it according to ____________.
Response:

• A.Expert opinion
• B.Industry standards
• C.Vendor guidance
• D.Prevailing law of that jurisdiction

Comment: *

Name: *

Email: *

Verification: *

In order to comply with regulatory requirements, which of the following secure erasure methods would be available to a cloud customer using volume storage within the IaaS service model?

• A.Demagnetizing
• B.Shredding
• C.Degaussing
• D.Cryptographic erasure

Comment: *

Name: *

Email: *

Verification: *

Designers making applications for the cloud have to take into consideration risks and operational constraints that did not exist or were not as pronounced in the legacy environment.
Which of the following is an element cloud app designers may have to consider incorporating in software for the cloud that might not have been as important in the legacy environment?
Response:

• A.DDoS resistance
• B.IAM capability
• C.Field validation
• D.Encryption for data at rest and in motion

Comment: *

Name: *

Email: *

Verification: *

Which of the following would NOT be used to determine the classification of data?
Response:

• A.Metadata
• B.Future use
• C.Creator
• D.PII

Comment: *

Name: *

Email: *

Verification: *