CLOUD SECURITY IMPLEMENTATION
PLAN UPDATED EXAM QUESTIONS AND
CORRECT ANSWERS
●● BIA (Business Impact Analysis)
Answer: An assessment of the priorities given to each asset and process
within the organization; analysis considers the effect (impact) any hard
or loss might mean to the organization overall; identify critical paths and
single points of failure; determine costs of compliance (legislative and
contractual requirements mandated).
●● Metered service
Answer: The organization only pays for what it uses.
●● Rapid Elasticity
Answer: Excess capacity available to be apportioned to cloud customers.
●● Cloud bursting
Answer: Organizations use hosted cloud service to augment internal,
private data center capabilities with managed services during times of
increased demand; an org can rent the additional capacity as needed
from an external cloud provider.
,●● Cloud service benefits
Answer: Reduction in personnel cost (data management); reduction in
capital expenditure (metered service, rapid elasticity, cloud bursting);
reduction in operational costs; transferring some regulatory costs;
reduction in costs for data archival/backup services.
●● ROI (Return on Investment)
Answer: Term related to cost-benefit measures; used to describe a
profitability ratio; calculated by dividing net profits by net assets.
●● Elasticity
Answer: Customers can contract cloud providers to use virtualization to
flexibly allocate only the needed usage of each resource to the
organization, while holding costs while maintaining profitability.
●● Simplicity
Answer: Allow a user to seamlessly use the service without frequently
interacting with the cloud service provider.
●● Scalability
Answer: Increasing/reducing services can be easily, quickly, and cost-
effectively accomplished.
●● IaaS (Infrastructure as a Service)
,Answer: Most basic service; allows customer to install all software and
OSs on hardware housed and connected by the cloud vendor.
●● PaaS (Platform as a Service)
Answer: Includes services from IaaS and OSs; vendor is responsible for
patching, administering, and updating the OS.
●● Data Storage Types
Answer: Structured/unstructured.
●● Unstructured Data Types
Answer: Qualitative data; natural-language text; incorporate media
(audio, video, images); important for data analytic strategies.
●● Structured Data Types
Answer: Quantitative data; organized and decipherable by machine
learning algorithms; SQL can be used to quickly input, search, and
manipulate data.
●● SaaS (Software as a Service)
Answer: Includes everything from IaaS and PaaS with the addition of
software programs; vendor is responsible for administering, patching,
and updating everything.
, ●● Public Cloud
Answer: Resources are owned and operated by a vendor and sold,
leased, or rented to anyone.
●● Private Cloud
Answer: Resources dedicated to a single customer; might be owned and
maintained by the entity that is the sole customer.
●● Community Cloud
Answer: Features infrastructure and processing owned and operated
by/for an affinity group; orgs come together to perform joint tasks and
functions.
●● Hybrid Cloud
Answer: Contains elements of other models; org might want to retain
some private cloud resources but lease some public cloud space.
●● Cloud Broker
Answer: Company that purchases hosting services from a provider and
resells them to its own customers.
●● CASB (Cloud Access Security Broker)
Answer: Third-party entity offering independent IAM services to CSPs
and cloud customers.
PLAN UPDATED EXAM QUESTIONS AND
CORRECT ANSWERS
●● BIA (Business Impact Analysis)
Answer: An assessment of the priorities given to each asset and process
within the organization; analysis considers the effect (impact) any hard
or loss might mean to the organization overall; identify critical paths and
single points of failure; determine costs of compliance (legislative and
contractual requirements mandated).
●● Metered service
Answer: The organization only pays for what it uses.
●● Rapid Elasticity
Answer: Excess capacity available to be apportioned to cloud customers.
●● Cloud bursting
Answer: Organizations use hosted cloud service to augment internal,
private data center capabilities with managed services during times of
increased demand; an org can rent the additional capacity as needed
from an external cloud provider.
,●● Cloud service benefits
Answer: Reduction in personnel cost (data management); reduction in
capital expenditure (metered service, rapid elasticity, cloud bursting);
reduction in operational costs; transferring some regulatory costs;
reduction in costs for data archival/backup services.
●● ROI (Return on Investment)
Answer: Term related to cost-benefit measures; used to describe a
profitability ratio; calculated by dividing net profits by net assets.
●● Elasticity
Answer: Customers can contract cloud providers to use virtualization to
flexibly allocate only the needed usage of each resource to the
organization, while holding costs while maintaining profitability.
●● Simplicity
Answer: Allow a user to seamlessly use the service without frequently
interacting with the cloud service provider.
●● Scalability
Answer: Increasing/reducing services can be easily, quickly, and cost-
effectively accomplished.
●● IaaS (Infrastructure as a Service)
,Answer: Most basic service; allows customer to install all software and
OSs on hardware housed and connected by the cloud vendor.
●● PaaS (Platform as a Service)
Answer: Includes services from IaaS and OSs; vendor is responsible for
patching, administering, and updating the OS.
●● Data Storage Types
Answer: Structured/unstructured.
●● Unstructured Data Types
Answer: Qualitative data; natural-language text; incorporate media
(audio, video, images); important for data analytic strategies.
●● Structured Data Types
Answer: Quantitative data; organized and decipherable by machine
learning algorithms; SQL can be used to quickly input, search, and
manipulate data.
●● SaaS (Software as a Service)
Answer: Includes everything from IaaS and PaaS with the addition of
software programs; vendor is responsible for administering, patching,
and updating everything.
, ●● Public Cloud
Answer: Resources are owned and operated by a vendor and sold,
leased, or rented to anyone.
●● Private Cloud
Answer: Resources dedicated to a single customer; might be owned and
maintained by the entity that is the sole customer.
●● Community Cloud
Answer: Features infrastructure and processing owned and operated
by/for an affinity group; orgs come together to perform joint tasks and
functions.
●● Hybrid Cloud
Answer: Contains elements of other models; org might want to retain
some private cloud resources but lease some public cloud space.
●● Cloud Broker
Answer: Company that purchases hosting services from a provider and
resells them to its own customers.
●● CASB (Cloud Access Security Broker)
Answer: Third-party entity offering independent IAM services to CSPs
and cloud customers.
