Test
Deane 221-240
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (20)
1Which of the following best describes SAML?
- AA standard used for directory synchronization
- BA standard for developing secure application management logistics
- CA standard for exchanging usernames and passwords across devices.
- DA standards for exchanging authentication and authorization data between security domains.
2Web application firewalls (WAFs) are designed primarily to protect applications from common attacks like:
- ARansomware
- BSyn floods
- CXSS and SQL injection
- DPassword cracking
3APIs are defined as which of the following?
- AA set of protocols, and tools for building software applications to access a web-based software application or tool
- BA set of routines, standards, protocols, and tools for building software applications to access a web-based software application or tool
- CA set of standards for building software applications to access a web-based software application or tool
- DA set of routines and tools for building software applications to access web-based software applications
4Which of the following best describes data masking?
- AA method for creating similar but inauthentic datasets used for software testing and user training.
- BA method used to protect prying eyes from data such as social security numbers and credit card data.
- CA method where the last few numbers in a dataset are not obscured. These are often used for authentication.
- DData masking involves stripping out all digits in a string of numbers so as to obscure the original number.
5Which of the following best describes a sandbox?
- AAn isolated space where untested code and experimentation can safely occur separate from the production environment.
- BA space where you can safely execute malicious code to see what it does.
- CAn isolated space where transactions are protected from malicious software
- DAn isolated space where untested code and experimentation can safely occur within the production environment.
6A localized incident or disaster can be addressed in a cost-effective manner by using which of the following?
- AUPS
- BGenerators
- CJoint operating agreements
- DStrict adherence to applicable regulations
7In addition to battery backup, a UPS can offer which capability?
- ABreach alert
- BConfidentiality
- CCommunication redundancy
- DLine conditioning
8For performance purposes, OS monitoring should include all of the following except:
- ADisk space
- BDisk I/O usage
- CCPU usage
- DPrint spooling
9Identity and access management (IAM) is a security discipline that ensures which of the following?
- AThat all users are properly authorized
- BThat the right individual gets access to the right resources at the right time for the right reasons.
- CThat all users are properly authenticated
- DThat unauthorized users will get access to the right resources at the right time for the right reasons
10Maintenance mode requires all of these actions except:
- ARemove all active production instances
- BEnsure logging continues
- CInitiate enhanced security controls
- DPrevent new logins
11What is one of the reasons a baseline might be changed?
- ANumerous change requests
- BTo reduce redundancy
- CNatural disaster
- DPower fluctuation
12In a federated identity arrangement using a trusted third-party model, who is the identity provider and who is the relying party?
- AThe users of the various organizations within the federations within the federation/a CASB
- BEach member organization/a trusted third party
- CEach member organization/each member organization
- DA contracted third party/the various member organizations of the federation
13Database activity monitoring (DAM) can be:
- AHost-based or network-based
- BServer-based or client-based
- CUsed in the place of encryption
- DUsed in place of data masking
14The BC/DR kit should include all of the following except:
- AAnnotated asset inventory
- BFlashlight
- CHard drives
- DDocumentation equipment
15The baseline should cover which of the following?
- AData breach alerting and reporting
- BAll regulatory compliance requirements
- CAs many systems throughout the organization as possible
- DA process for version control
16Which of the following roles is responsible for creating cloud components and the testing and validation of services?
- ACloud auditor
- BInter-cloud provider
- CCloud service broker
- DCloud service developer
17Which of the following storage types is most closely associated with a database-type storage implementation?
- AObject
- BUnstructured
- CVolume
- DStructured
18A data custodian is responsible for which of the following?
- AData context
- BData content
- CThe safe custody, transport, storage of the data, and implementation of business rules
- DLogging access and alerts
19Which of the following is the least challenging with regard to eDiscovery in the cloud?
- AIdentifying roles such as data owner, controller and processor
- BDecentralization of data storage
- CForensic analysis
- DComplexities of International law
20What is the Cloud Security Alliance Cloud Controls Matrix (CCM)?
- AA set of software development life cycle requirements for cloud service providers
- BAn inventory of cloud services security controls that are arranged into a hierarchy of security domains
- CAn inventory of cloud service security controls that are arranged into separate security domains
- DA set of regulatory requirements for cloud service providers
Información
- Descripción
- Deane 201-258 Test sobre Deane 221-240, creado por Bryan Jensen el 28/10/2020.
- Autor
- Bryan Jensen
- Idioma
- English
- Visitas
- 2
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test