Test
Deane 201-220
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (20)
1All of the following are terms used to described the practice of obscuring original raw data so that only a portion is displayed for operational purposes, except:
- ATokenization
- BMasking
- CData discovery
- DObfuscation
2DLP solutions can aid in deterring loss due to which of the following?
- APower failure
- BPerformance
- CBad policy
- DMalicious disclosure
3All the following are data analytics modes, except:
- ADatamining
- BAgile business intelligence
- CRefractory iterations
- DReal-time analytics
4What are the U.S. State Department controls on technology exports known as?
- ADRM
- BITAR
- CEAR
- DEAL
5When crafting plans and policies for data archiving, we should consider all of the following, except:
- AThe backup process
- BImmediacy of the technology
- CArchive location
- DThe format of the data
6DLP solutions can aid in deterring loss due to which of the following?
- ADevice failure
- BRandomization
- CInadvertent disclosure
- DNatural disaster
7DLP can be combined with what other security technology to enhance data controls?
- ASIEM
- BHypervisors
- CDRM
- DKerberos
8The goals of SIEM solution implementation include all of the following, except:
- ADashboarding
- BPerformance enhancement
- CTrend analysis
- DCentralization of log streams
9What is the cloud service model in which the customer is responsible for administration of the OS?
- AQaas
- BSaaS
- CPaas
- DIaaS
10All of the following are techniques to enhance the portability of cloud data, in order to minimize the potential of vendor lock-in except:
- AEnsure there are no physical limitations to moving
- BUse DRM and DLP solutions widely throughout the cloud operation
- CEnsure favorable contract terms to support portability
- DAvoid proprietary data formats
11Hardening the operating system refers to all of the following except:
- ALimiting administrator access
- BClosing unused ports
- CRemoving antimalware agents
- DRemoving unnecessary services and libraries
12Which kind of SSAE audit report is a cloud customer most likely to receive from a cloud provider?
- ASOC 1 Type 1
- BSOC 2 Type 2
- CSOC 3
- DSOC 1 Type 2
13The cloud customer's trust in the cloud provider can be enhanced by all of the following except:
- ASLAS
- BShared administration
- CAudits
- Dreal-time video surveillance
14As a result of scandals involving publicly traded corporations such as Enron, World Com, and Adelphi, Congress passed legislation known as:
- ASOX
- BHIPAA
- CFERPA
- DGLBA
15In addition to whatever audit results the provider shares with the customer, what other mechanism does the customer have to ensure trust in the provider's performance and duties?
- AHIPAA
- BThe contract
- CStatutes
- DSecurity control matrix
16The application normative framework is best described as which of the following?
- AA superset of the ONF
- BA stand-alone framework for storing security practices for the ONF
- CThe complete ONF
- DA subnet of the ONF
17Deviations from the baseline should be investigated and ______.
- ARevealed
- BDocumented
- CEncouraged
- DEnforced
18Which of the following best describes the Organizational Normative Framework (ONF)?
- AA set of application security, and best practices, catalogued and leveraged by the organization
- BA container for components of an application's security, best practices catalogued and leveraged by the organization
- CA framework of containers for some of the components of application security, best practices, catalogued and leveraged by the organization
- DA framework of containers for all components of application security, best practices, catalogued and leveraged by the organization.
19A UPS should have enough power to last how long?
- AOne day
- B12 hours
- CLong enough for graceful shutdown
- D10 minutes
20Which of the following best describes the purpose and scope of ISO/IEC 27034-1?
- ADescribes international privacy standards for cloud computing
- BServes as a newer replacement for NIST 800-52 r4
- CProvides on overview of network and infrastructure security designed to secure cloud applications.
- DProvides an overview of application security that introduces definitive concepts, principles, and processes involved in application security.
Información
- Descripción
- Deane 201-258 Test sobre Deane 201-220, creado por Bryan Jensen el 27/10/2020.
- Autor
- Bryan Jensen
- Idioma
- English
- Visitas
- 0
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test