Designers making applications for the cloud have to take into consideration risks and operational constraints that did not exist or were not as pronounced in the legacy environment. Which of the following is an element cloud app designers may have to consider incorporating in software for the cloud that might not have been as important in the legacy environment?

• A.DDoS resistance
• B.Field validation
• C.Encryption for data at rest and in motion
• D.IAM capability

Comment: *

Name: *

Email: *

Verification: *

Which of the following aspects of security is solely the responsibility of the cloud provider?

• A.Regulatory compliance
• B.Physical security
• C.Operating system auditing
• D.Personal security of developers

Comment: *

Name: *

Email: *

Verification: *

Your organization is considering a move to a cloud environment and is looking for certifications or audit reports from cloud providers to ensure adequate security controls and processes.
Which of the following is NOT a security certification or audit report that would be pertinent?
Response:

• A.FedRAMP
• B.PCI DSS
• C.FIPS 140-2
• D.SOC Type 2

Comment: *

Name: *

Email: *

Verification: *

Deviations from the baseline should be investigated and __________________.

• A.Revealed
• B.Documented
• C.Encouraged
• D.Enforced

Comment: *

Name: *

Email: *

Verification: *

You have been tasked by management to offload processing and validation of incoming encoded data from your application servers and their associated APIs. Which of the following would be the most appropriate device or software to consider?
Response:

• A.Firewall
• B.XML accelerator
• C.XML firewall
• D.Web application firewall

Comment: *

Name: *

Email: *

Verification: *