Although performing BCDR tests at regular intervals is a best practice to ensure processes and documentation are still relevant and efficient, which of the following represents a reason to conduct a BCDR review outside of the regular interval?

• A.Management changes
• B.Staff changes
• C.Application changes
• D.Regulatory changes

Comment: *

Name: *

Email: *

Verification: *

Which of the following areas of responsibility would be shared between the cloud customer and cloud provider within the Software as a Service (SaaS) category?

• A.Data
• B.Governance
• C.Application
• D.Physical

Comment: *

Name: *

Email: *

Verification: *

GAAPs are created and maintained by which organization?

• A.ISO/IEC
• B.AICPA
• C.PCI Council
• D.ISO

Comment: *

Name: *

Email: *

Verification: *

What strategy involves replacing sensitive data with opaque values, usually with a means of mapping it back to the original value?

• A.Masking
• B.Anonymization
• C.Tokenization
• D.Obfuscation

Comment: *

Name: *

Email: *

Verification: *

When using an IaaS solution, what is the capability provided to the customer?

• A.To provision processing, storage, networks, and other fundamental computing resources when the consumer is able to deploy and run arbitrary software, which can include OSs and applications.
• B.To provision processing, storage, networks, and other fundamental computing resources when the auditor is able to deploy and run arbitrary software, which can include OSs and applications.
• C.To provision processing, storage, networks, and other fundamental computing resources when the provider is able to deploy and run arbitrary software, which can include OSs and applications.
• D.To provision processing, storage, networks, and other fundamental computing resources when the consumer is not able to deploy and run arbitrary software, which can include OSs and applications.

Comment: *

Name: *

Email: *

Verification: *