Which of the following threat types involves an application that does not validate authorization for portions of itself beyond when the user first enters it?

• A.Cross-site request forgery
• B.Missing function-level access control
• C.Injection
• D.Cross-site scripting

Comment: *

Name: *

Email: *

Verification: *

If a cloud computing customer wishes to guarantee that a minimum level of resources will always be available, which of the following set of services would compromise the reservation?

• A.Memory and networking
• B.CPU and software
• C.CPU and storage
• D.CPU and memory

Comment: *

Name: *

Email: *

Verification: *

Why does a Type 1 hypervisor typically offer tighter security controls than a Type 2 hypervisor?

• A.A Type 1 hypervisor also controls patching of its hosted virtual machines ensure they are always secure.
• B.A Type 1 hypervisor is tied directly to the bare metal and only runs with code necessary to perform its specific mission.
• C.A Type 1 hypervisor performs hardware-level encryption for tighter security and efficiency.
• D.A Type 1 hypervisor only hosts virtual machines with the same operating systems as the hypervisor.

Comment: *

Name: *

Email: *

Verification: *

What process is used within a clustered system to provide high availability and load balancing?

• A.Dynamic balancing
• B.Dynamic clustering
• C.Dynamic optimization
• D.Dynamic resource scheduling

Comment: *

Name: *

Email: *

Verification: *

Designers making applications for the cloud have to take into consideration risks and operational constraints that did not exist or were not as pronounced in the legacy environment. Which of the following is an element cloud app designers may have to consider incorporating in software for the cloud that might not have been as important in the legacy environment?

• A.IAM capability
• B.Field validation
• C.Encryption for data at rest and in motion
• D.DDoS resistance

Comment: *

Name: *

Email: *

Verification: *