In attempting to provide a layered defense, the security practitioner should convince senior management to include security controls of which type?
Response:

• A.All of the above
• B.Administrative
• C.Physical
• D.Technological

Comment: *

Name: *

Email: *

Verification: *

Countermeasures for protecting cloud operations against internal threats include all of the following except:

• A.Extensive and comprehensive training programs, including initial, recurring, and refresher sessions
• B.Skills and knowledge testing
• C.Hardened perimeter devices
• D.Aggressive background checks

Comment: *

Name: *

Email: *

Verification: *

Which of the following does NOT relate to the hiding of sensitive data from data sets?

• A.Obfuscation
• B.Federation
• C.Masking
• D.Anonymization

Comment: *

Name: *

Email: *

Verification: *

Which of the following technologies is NOT commonly used for accessing systems and services in a cloud environment in a secure manner?

• A.KVM
• B.HTTPS
• C.VPN
• D.TLS

Comment: *

Name: *

Email: *

Verification: *

Your organization is considering a move to a cloud environment and is looking for certifications or audit reports from cloud providers to ensure adequate security controls and processes. Which of the following is NOT a security certification or audit report that would be pertinent?

• A.SOC Type 2
• B.FIPS 140-2
• C.FedRAMP
• D.PCI DSS

Comment: *

Name: *

Email: *

Verification: *