Quiz
Deane 21-40
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (20)
1Which of the following threat types involves the sending of invalid and manipulated requests through a user's client to execute commands on the application under their own credentials?
- AInjection
- BCross-site request forgery
- CMissing function-level access control
- DCross-site scripting
2With finite resources available within a cloud, even the largest cloud providers will at times need to determine which customers will receive additional resources first.
What is the term associated with this determination?- AWeighting
- BPrioritization
- CShares
- DScoring
3In order to comply with regulatory requirements, which of the following secure erasure methods would be available to a cloud customer using volume storage within the IaaS service model?
- ADemagnetizing
- BShredding
- CDegaussing
- DCryptographic erasure
4Where is a DLP solution generally installed when utilized for monitoring data in use?
- AApplication server
- BDatabase server
- CNetwork perimeter
- DUser's client
5Which of the following aspects of cloud computing would make it more likely that a cloud provider would be unwilling to satisfy specific certification requirements?
- ARegulation
- BMultitenancy
- CVirtualization
- DResource pooling
6Which phase of the cloud data lifecycle would be the MOST appropriate for the use of DLP technologies to protect the data?
- AUse
- BStore
- CShare
- DCreate
7During which phase of the cloud data lifecycle is it possible for the classification of data to change?
- AUse
- BArchive
- CCreate
- DShare
8If a key feature of cloud computing that your organization desires is the ability to scale and expand without limit or concern about available resources, which cloud deployment model would you MOST likely be considering?
- APublic
- BHybrid
- CPrivate
- DCommunity
9What is a serious complication an organization faces from the compliance perspective with international operations?
- AMultiple jurisdictions
- BDifferent certifications
- CDifferent operational procedures
- DDifferent capabilities
10ISO/IEC has established international standards for many aspects of computing and any processes or procedures related to information technology.
Which ISO/IEC standard has been established to provide a framework for handling eDiscovery processes?- AISO/IEC 27001
- BISO/IEC 27002
- CISO/IEC 27040
- DISO/IEC 27050
11If a company needed to guarantee through contract and SLAs that a cloud provider would always have available sufficient resources to start their services and provide a certain level of provisioning, what would the contract need to refer to?
- ALimit
- BReservation
- CAssurance
- DGuarantee
12Many aspects and features of cloud computing can make eDiscovery compliance more difficult or costly.
Which aspect of cloud computing would be the MOST complicating factor?- AMeasured service
- BBroad network access
- CMultitenancy
- DPortability
13A crucial decision any company must make is in regard to where it hosts the data systems it depends on. A debate exists as to whether it's best to lease space in a data center or build your own data center--and now with cloud computing, whether to purchase resources within a cloud.
What is the biggest advantage to leasing space in a data center versus procuring cloud services?- ARegulations
- BControl
- CSecurity
- DCosts
14Which of the following systems is used to employ a variety of different techniques to discover and alert on threats and potential threats to systems and networks?
- AIDS
- BIPS
- CFirewall
- DWAF
15Which of the following is not a risk management framework?
- ACOBIT
- BHex GBL
- CISO 31000:2009
- DNIST SP 800-37
16In order to ensure ongoing compliance with regulatory requirements, which phase of the cloud data lifecycle must be tested regularly?
- AArchive
- BShare
- CStore
- DDestroy
17Which of the following threat types involves leveraging a user's browser to send untrusted data to be executed with legitimate access via the user's valid credentials?
- AInjection
- BMissing function-level access control
- CCross-site scripting
- DCross-site request forgery
18Digital investigations have adopted many of the same methodologies and protocols as other types of criminal or scientific inquiries.
What term pertains to the application of scientific norms and protocols to digital investigations?- AScientific
- BInvestigative
- CMethodological
- DForensics
19Within a federated identity system, which entity accepts tokens from the identity provider?
- AAssertion manager
- BServicing party
- CProxy party
- DRelying party
20Different types of audits are intended for different audiences, such as internal, external, regulatory, and so on.
Which of the following audits are considered "restricted use" versus being for a more broad audience?- ASOC Type 2
- BSOC Type 1
- CSOC Type 3
- DSAS-70
Information
- Description
- Deane 1-100 Quiz on Deane 21-40, created by Bryan Jensen on 22/10/2020.
- Author
- Bryan Jensen
- Language
- English
- Views
- 1
- Tags
- Rating
- No ratings yet Rate this quiz