Quiz
Deane 41-60
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (20)
1Although host-based and network-based IDSs perform similar functions and have similar capabilities, which of the following is an advantage of a network-based IDS over a host-based IDS, assuming all capabilities are equal?
- ASegregated from host systems
- BNetwork access
- CScalability
- DExternal to system patching
2DNSSEC was designed to add a layer of security to the DNS protocol. Which type of attack was the DNSSEC extension designed to mitigate?
- AAccount hijacking
- BSnooping
- CSpoofing
- DData exposure
3Which aspect of cloud computing pertains to cloud customers only paying for the resources and services they actually use?
- AMetered service
- BMeasured billing
- CMetered billing
- DMeasured service
4Many of the traditional concepts of systems and services for a traditional data center also apply to the cloud. Both are built around key computing concepts.
Which of the following compromise the two facets of computing?- ACPU and software
- BCPU and storage
- CCPU and memory
- DMemory and networking
5With a cloud service category where the cloud customer is provided a full application framework into which to deploy their code and services, which storage types are MOST likely to be available to them?
- AStructured and unstructured
- BStructured and hierarchical
- CVolume and database
- DVolume and object
6Firewalls are used to provide network security throughout an enterprise and to control what information can be accessed--and to a certain extent, through what means.
Which of the following is NOT something that firewalls are concerned with?- AIP address
- BEncryption
- CPort
- DProtocol
7Within an IaaS implementation, which of the following would NOT be a metric used to quantify service charges for the cloud customer?
- AMemory
- BNumber of users
- CStorage
- DCPU
8Many different common threats exist against web-exposed services and applications. One attack involves attempting to leverage input fields to execute queries in a nested fashion that is unintended by the developers.
What type of attack is this?- AInjection
- BMissing function-level access control
- CCross-site scripting
- DCross-site request forgery
9For service provisioning and support, what is the ideal amount of interaction between a cloud customer and cloud provider?
- AHalf
- BFull
- CMinimal
- DDepends on the contract
10What does a cloud customer purchase or obtain from a cloud provider?
- AServices
- BHosting
- CServers
- DCustomers
11Which phase of the cloud data lifecycle represents the first instance where security controls can be implemented?
- AUse
- BShare
- CStore
- DCreate
12You were recently hired as a project manager at a major university to implement cloud services for the academic and administrative systems. Because the load and demand for services at a university are very cyclical in nature, commensurate with the academic calendar, which of the following aspects of cloud computing would NOT be a primary with the academic calendar, which of the following aspects of cloud computing would NOT be a primary benefit to you?
- AMeasured service
- BBroad network access
- CResource pooling
- DOn-demand self-service
13Which cloud deployment model is MOST likely to offer free or very cheap services to users?
- AHybrid
- BCommunity
- CPublic
- DPrivate
14Where is a DLP solution generally installed when utilized for monitoring data in transit?
- ANetwork perimeter
- BDatabase server
- CApplication server
- DWeb server
15With laas, what is responsible for handling the security and control over the volume storage space?
- AManagement plane
- BOperating system
- CApplication
- DHypervisor
16Configurations and policies for a system can come from a variety of sources and take a variety of formats. Which concept pertains to the application of a set of configurations and policies that is applied to all systems or a class of systems?
- AHardening
- BLeveling
- CBaselines
- DStandards
17Which of the following tasks within a Saas environment would NOT be something the cloud customer would be responsible for?
- AAuthentication mechanism
- BBranding
- CTraining
- DUser access
18An SLA contains the official requirements for contract performance and satisfaction between the cloud provider and cloud customer.
Which of the following would NOT be a component with measurable metrics and requirements as part of an SLA?- ANetwork
- BUsers
- CMemory
- DCPU
19Within a federated identity system, which of the following would you be MOST likely to use for sending information for consumption by a relying party?
- AXML
- BHTML
- CWS-Federation
- DSAML
20Which data state would be most likely to use digital signatures as a security protection mechanism?
- AData in use
- BData in transit
- CArchived
- DData at rest
Information
- Description
- Deane 1-100 Quiz on Deane 41-60, created by Bryan Jensen on 22/10/2020.
- Author
- Bryan Jensen
- Language
- English
- Views
- 1
- Tags
- Rating
- No ratings yet Rate this quiz