Which data point that auditors always desire is very difficult to provide within a cloud environment?

• A.Access policy
• B.Systems architecture
• C.Baselines
• D.Privacy statement

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT part of a retention policy?

• A.Format
• B.Costs
• C.Accessibility
• D.Duration

Comment: *

Name: *

Email: *

Verification: *

____________ can often be the result of inadvertent activity.
Response:

• A.DDoS
• B.Sprawl
• C.Phishing
• D.Disasters

Comment: *

Name: *

Email: *

Verification: *

Dynamic application security testing (DAST) is usually considered a ________ form of testing.
Response:
White-box

• A.Gray-box
• B.Parched field
• C.Parched field
• D.Black-box

Comment: *

Name: *

Email: *

Verification: *

All of the following might be used as data discovery characteristics in a content-analysis-based data discovery effort except ____________.
Response:

• A.Frequency
• B.Inheritance
• C.Pattern-matching
• D.Keywords

Comment: *

Name: *

Email: *

Verification: *