Which of the following data-sanitation approaches are always available within a cloud environment?
Response:

• A.Shredding
• B.Cryptographic erasure
• C.Overwriting
• D.Physical destruction

Comment: *

Name: *

Email: *

Verification: *

SOC 2 reports were intended to be ____________.

• A.Retained for internal use
• B.Released to the public
• C.Only technical assessments
• D.Nonbinding

Comment: *

Name: *

Email: *

Verification: *

You are the security policy lead for your organization, which is considering migrating from your on-premises, legacy environment into the cloud. You are reviewing the Cloud Security Alliance Cloud Controls Matrix (CSA CCM) as a tool for your organization.
Which of the following benefits will the CSA CCM offer your organization?
Response:

• A.Simplifying regulatory compliance
• B.Ensuring that the baseline configuration is applied to all systems
• C.Collecting multiple data streams from your log files
• D.Enforcing contract terms between your organization and the cloud provider

Comment: *

Name: *

Email: *

Verification: *

IRM solutions allow an organization to place different restrictions on data usage than would otherwise be possible through traditional security controls.
Which of the following controls would be possible with IRM that would not with traditional security controls?

• A.Copy
• B.Read
• C.Delete
• D.Print

Comment: *

Name: *

Email: *

Verification: *

Different security testing methodologies offer different strategies and approaches to testing systems, requiring security personnel to determine the best type to use for their specific circumstances.
What does dynamic application security testing (DAST) NOT entail that SAST does?

• A.Discovery
• B.Knowledge of the system
• C.Scanning
• D.Probing

Comment: *

Name: *

Email: *

Verification: *