Test
Deane 241-258
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (18)
1Which of the following is a valid risk management metric?
- AKPI
- BKRI
- CSOC
- DSLA
2Which of the following is the best example of a key component of regulated PII?
- AAudit rights of subcontractors
- BItems that should be implemented
- CPCI DSS
- DMandatory breach reporting
3Which of the following components are part of what a CCSP should review when looking at contracting with a cloud service provider?
- ARedundant uplink grafts
- BBackground checks for the provider's personnel
- CThe physical layout of the datacenter
- DUse of subcontractors
4Which of the following is not a way to manage risk?
- ATransferring
- BAccepting
- CMitigating
- DEnveloping
5Which of the following terms is not associated with cloud forensics?
- ADiscovery
- BChain of custody
- CAnalysis
- DPlausibility
6Which is the lowest level of the CSA STAR program?
- AAttestation
- BSelf-assessment
- CHybridization
- DContinuous monitoring
7Which of the following is the primary purpose of an SOC 3 report?
- AHIPAA compliance
- BAbsolute assurances
- CSeal of approval
- DCompliance with PCI/DSS
8Which of the following is not an example of a highly regulated environment?
- AFinancial services
- BHealthcare
- CPublic companies
- DWhole or distribution
9Which of the following methods of addressing risk is most associated with insurance?
- AMitigation
- BTransference
- CAvoidance
- DAcceptance
10Legal controls refer to which of the following?
- AISO 27001
- BPCI DSS
- CNIST 800-53r4
- DControls designed to comply with laws and regulations related to the cloud environment
11Which of the following best describes a cloud carrier?
- AThe intermediary who provides connectivity and transport of cloud providers and cloud consumers
- BA person or entity responsible for making a cloud service available to consumers
- CThe person or entity responsible for transporting data across the Internet
- DThe person or entity responsible for keeping cloud services running for customers
12Gap analysis is performed for what reason?
- ATo begin the benchmarking process
- BTo assure proper accounting practices are being used
- CTo provide assurances to cloud customers
- DTo ensure all controls are in place and working properly
13Which of the following frameworks focuses specifically on design implementation and management?
- AISO 31000:2009
- BISO 27017
- CNIST 800-92
- DHIPAA
14Which of the following report is most aligned with financial control audits?
- ASSAE
- BSOC 2
- CSOC1
- DSOC3
15Which of the following is not a risk management framework?
- ACOBIT
- BHex GBL
- CISO 31000:2009
- DNIST SP 800-37
16Limits for resource utilization can be set at different levels within a cloud environment to ensure that no particular entity can consume a level of resources that impacts other cloud customers.
Which of the following is NOT a unit covered by limits?- AHypervisor
- BCloud customer
- CVirtual machine
- DService
17Which of the following is the dominant driver behind the regulations to which a system or application must adhere?
- AData source
- BLocality
- CContract
- DSLA
18When using a SaaS solution, what is the capability provided to the customer?
- ATo use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a program interface. The consumer does manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
- BTo use the consumer's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
- CTo use the consumer's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a program interface. The consumer does manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
- DTo use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
Información
- Descripción
- Deane 201-258 Test sobre Deane 241-258, creado por Bryan Jensen el 28/10/2020.
- Autor
- Bryan Jensen
- Idioma
- English
- Visitas
- 1
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test