Which of the following threat types involves an application that does not validate authorization for portions of itself beyond when the user first enters it?

• A.Cross-site request forgery
• B.Missing function-level access control
• C.Injection
• D.Cross-site scripting

Comment: *

Name: *

Email: *

Verification: *

Which concept pertains to cloud customers paying only for the resources they use and consume, and only for the duration they are using them?

• A.Auto-scaling
• B.Elasticity
• C.Measured service
• D.Portability

Comment: *

Name: *

Email: *

Verification: *

Which of the following is considered a physical control?

• A.Fences
• B.Ceilings
• C.Carpets
• D.Doors

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a possible negative aspect of bit-splitting?
Response:

• A.There may be cause for management concern that the technology will violate internal policy.
• B.Limited vendors make acquisition and support challenging.
• C.Users will have far greater difficulty understanding the implementation.
• D.It may require trust in additional third parties beyond the primary cloud service provider.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT one of the cloud computing activities, as outlined in ISO/IEC 17789?
Response:

• A.Cloud service administrator
• B.Cloud service provider
• C.Cloud service customer
• D.Cloud service partner

Comment: *

Name: *

Email: *

Verification: *