Which of the following threat types involves the sending of invalid and manipulated requests through a user's client to execute commands on the application under their own credentials?

• A.Injection
• B.Cross-site request forgery
• C.Missing function-level access control
• D.Cross-site scripting

Comment: *

Name: *

Email: *

Verification: *

Which of the following threat types involves an application developer leaving references to internal information and configurations in code that is exposed to the client?

• A.Sensitive data exposure
• B.Security misconfiguration
• C.Insecure direct object references
• D.Unvalidated redirect and forwards

Comment: *

Name: *

Email: *

Verification: *

The Cloud Security Alliance (CSA) Security, Trust, and Assurance Registry (STAR) program has __________ tiers.
Response:

• A.Two
• B.Three
• C.Eight
• D.Four

Comment: *

Name: *

Email: *

Verification: *

Data transformation in a cloud environment should be of great concern to organizations considering cloud migration because __________ could affect data classification processes/implementations.
Response:

• A.Virtualization
• B.Physical distance
• C.Remote access
• D.Multitenancy

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?

• A.Infrastructure
• B.Platform
• C.Application
• D.Data

Comment: *

Name: *

Email: *

Verification: *