Which of the following aspects of cloud computing would make it more likely that a cloud provider would be unwilling to satisfy specific certification requirements?

• A.Regulation
• B.Multitenancy
• C.Virtualization
• D.Resource pooling

Comment: *

Name: *

Email: *

Verification: *

DNSSEC was designed to add a layer of security to the DNS protocol.
Which type of attack was the DNSSEC extension designed to mitigate?

• A.Account hijacking
• B.Snooping
• C.Spoofing
• D.Data exposure

Comment: *

Name: *

Email: *

Verification: *

Which of the following represents a prioritization of applications or cloud customers for the allocation of additional requested resources when there is a limitation on available resources?

• A.Provision
• B.Limit
• C.Reservation
• D.Share

Comment: *

Name: *

Email: *

Verification: *

Implementing baselines on systems would take an enormous amount of time and resources if the staff had to apply them to each server, and over time, it would be almost impossible to keep all the systems in sync on an ongoing basis.
Which of the following is NOT a package that can be used for implementing and maintaining baselines across an enterprise?

• A.Puppet
• B.SCCM
• C.Chef
• D.GitHub

Comment: *

Name: *

Email: *

Verification: *

Which of the following threat types can occur when an application does not properly validate input and can be leveraged to send users to malicious sites that appear to be legitimate?

• A.Unvalidated redirects and forwards
• B.Insecure direct object references
• C.Security miscomfiguration
• D.Sensitive data exposure

Comment: *

Name: *

Email: *

Verification: *