Quiz
Deane 221-240
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (20)
1Which of the following best describes SAML?
- AA standard used for directory synchronization
- BA standard for developing secure application management logistics
- CA standard for exchanging usernames and passwords across devices.
- DA standards for exchanging authentication and authorization data between security domains.
2Web application firewalls (WAFs) are designed primarily to protect applications from common attacks like:
- ARansomware
- BSyn floods
- CXSS and SQL injection
- DPassword cracking
3APIs are defined as which of the following?
- AA set of protocols, and tools for building software applications to access a web-based software application or tool
- BA set of routines, standards, protocols, and tools for building software applications to access a web-based software application or tool
- CA set of standards for building software applications to access a web-based software application or tool
- DA set of routines and tools for building software applications to access web-based software applications
4Which of the following best describes data masking?
- AA method for creating similar but inauthentic datasets used for software testing and user training.
- BA method used to protect prying eyes from data such as social security numbers and credit card data.
- CA method where the last few numbers in a dataset are not obscured. These are often used for authentication.
- DData masking involves stripping out all digits in a string of numbers so as to obscure the original number.
5Which of the following best describes a sandbox?
- AAn isolated space where untested code and experimentation can safely occur separate from the production environment.
- BA space where you can safely execute malicious code to see what it does.
- CAn isolated space where transactions are protected from malicious software
- DAn isolated space where untested code and experimentation can safely occur within the production environment.
6A localized incident or disaster can be addressed in a cost-effective manner by using which of the following?
- AUPS
- BGenerators
- CJoint operating agreements
- DStrict adherence to applicable regulations
7In addition to battery backup, a UPS can offer which capability?
- ABreach alert
- BConfidentiality
- CCommunication redundancy
- DLine conditioning
8For performance purposes, OS monitoring should include all of the following except:
- ADisk space
- BDisk I/O usage
- CCPU usage
- DPrint spooling
9Identity and access management (IAM) is a security discipline that ensures which of the following?
- AThat all users are properly authorized
- BThat the right individual gets access to the right resources at the right time for the right reasons.
- CThat all users are properly authenticated
- DThat unauthorized users will get access to the right resources at the right time for the right reasons
10Maintenance mode requires all of these actions except:
- ARemove all active production instances
- BEnsure logging continues
- CInitiate enhanced security controls
- DPrevent new logins
11What is one of the reasons a baseline might be changed?
- ANumerous change requests
- BTo reduce redundancy
- CNatural disaster
- DPower fluctuation
12In a federated identity arrangement using a trusted third-party model, who is the identity provider and who is the relying party?
- AThe users of the various organizations within the federations within the federation/a CASB
- BEach member organization/a trusted third party
- CEach member organization/each member organization
- DA contracted third party/the various member organizations of the federation
13Database activity monitoring (DAM) can be:
- AHost-based or network-based
- BServer-based or client-based
- CUsed in the place of encryption
- DUsed in place of data masking
14The BC/DR kit should include all of the following except:
- AAnnotated asset inventory
- BFlashlight
- CHard drives
- DDocumentation equipment
15The baseline should cover which of the following?
- AData breach alerting and reporting
- BAll regulatory compliance requirements
- CAs many systems throughout the organization as possible
- DA process for version control
16Which of the following roles is responsible for creating cloud components and the testing and validation of services?
- ACloud auditor
- BInter-cloud provider
- CCloud service broker
- DCloud service developer
17Which of the following storage types is most closely associated with a database-type storage implementation?
- AObject
- BUnstructured
- CVolume
- DStructured
18A data custodian is responsible for which of the following?
- AData context
- BData content
- CThe safe custody, transport, storage of the data, and implementation of business rules
- DLogging access and alerts
19Which of the following is the least challenging with regard to eDiscovery in the cloud?
- AIdentifying roles such as data owner, controller and processor
- BDecentralization of data storage
- CForensic analysis
- DComplexities of International law
20What is the Cloud Security Alliance Cloud Controls Matrix (CCM)?
- AA set of software development life cycle requirements for cloud service providers
- BAn inventory of cloud services security controls that are arranged into a hierarchy of security domains
- CAn inventory of cloud service security controls that are arranged into separate security domains
- DA set of regulatory requirements for cloud service providers
Information
- Description
- Deane 201-258 Quiz on Deane 221-240, created by Bryan Jensen on 28/10/2020.
- Author
- Bryan Jensen
- Language
- English
- Views
- 2
- Tags
- Rating
- No ratings yet Rate this quiz