Quiz
Deane 201-220
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (20)
1All of the following are terms used to described the practice of obscuring original raw data so that only a portion is displayed for operational purposes, except:
- ATokenization
- BMasking
- CData discovery
- DObfuscation
2DLP solutions can aid in deterring loss due to which of the following?
- APower failure
- BPerformance
- CBad policy
- DMalicious disclosure
3All the following are data analytics modes, except:
- ADatamining
- BAgile business intelligence
- CRefractory iterations
- DReal-time analytics
4What are the U.S. State Department controls on technology exports known as?
- ADRM
- BITAR
- CEAR
- DEAL
5When crafting plans and policies for data archiving, we should consider all of the following, except:
- AThe backup process
- BImmediacy of the technology
- CArchive location
- DThe format of the data
6DLP solutions can aid in deterring loss due to which of the following?
- ADevice failure
- BRandomization
- CInadvertent disclosure
- DNatural disaster
7DLP can be combined with what other security technology to enhance data controls?
- ASIEM
- BHypervisors
- CDRM
- DKerberos
8The goals of SIEM solution implementation include all of the following, except:
- ADashboarding
- BPerformance enhancement
- CTrend analysis
- DCentralization of log streams
9What is the cloud service model in which the customer is responsible for administration of the OS?
- AQaas
- BSaaS
- CPaas
- DIaaS
10All of the following are techniques to enhance the portability of cloud data, in order to minimize the potential of vendor lock-in except:
- AEnsure there are no physical limitations to moving
- BUse DRM and DLP solutions widely throughout the cloud operation
- CEnsure favorable contract terms to support portability
- DAvoid proprietary data formats
11Hardening the operating system refers to all of the following except:
- ALimiting administrator access
- BClosing unused ports
- CRemoving antimalware agents
- DRemoving unnecessary services and libraries
12Which kind of SSAE audit report is a cloud customer most likely to receive from a cloud provider?
- ASOC 1 Type 1
- BSOC 2 Type 2
- CSOC 3
- DSOC 1 Type 2
13The cloud customer's trust in the cloud provider can be enhanced by all of the following except:
- ASLAS
- BShared administration
- CAudits
- Dreal-time video surveillance
14As a result of scandals involving publicly traded corporations such as Enron, World Com, and Adelphi, Congress passed legislation known as:
- ASOX
- BHIPAA
- CFERPA
- DGLBA
15In addition to whatever audit results the provider shares with the customer, what other mechanism does the customer have to ensure trust in the provider's performance and duties?
- AHIPAA
- BThe contract
- CStatutes
- DSecurity control matrix
16The application normative framework is best described as which of the following?
- AA superset of the ONF
- BA stand-alone framework for storing security practices for the ONF
- CThe complete ONF
- DA subnet of the ONF
17Deviations from the baseline should be investigated and ______.
- ARevealed
- BDocumented
- CEncouraged
- DEnforced
18Which of the following best describes the Organizational Normative Framework (ONF)?
- AA set of application security, and best practices, catalogued and leveraged by the organization
- BA container for components of an application's security, best practices catalogued and leveraged by the organization
- CA framework of containers for some of the components of application security, best practices, catalogued and leveraged by the organization
- DA framework of containers for all components of application security, best practices, catalogued and leveraged by the organization.
19A UPS should have enough power to last how long?
- AOne day
- B12 hours
- CLong enough for graceful shutdown
- D10 minutes
20Which of the following best describes the purpose and scope of ISO/IEC 27034-1?
- ADescribes international privacy standards for cloud computing
- BServes as a newer replacement for NIST 800-52 r4
- CProvides on overview of network and infrastructure security designed to secure cloud applications.
- DProvides an overview of application security that introduces definitive concepts, principles, and processes involved in application security.
Informationen
- Beschreibung
- Deane 201-258 Quiz am Deane 201-220, erstellt von Bryan Jensen am 27/10/2020.
- Autor
- Bryan Jensen
- Sprache
- English
- Aufrufe
- 0
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz