D320 80 PRACTICE EXAM QUESTIONS WITH CORRECT DETAILED ANSWERS | ALREADY GRADED A+RECENT VERSION

D320 80 PRACTICE EXAM QUESTIONS WITH CORRECT DETAILED ANSWERS | ALREADY GRADED A+RECENT VERSION 1) What does spof mean? - answer single point of failure - a component in a system whose failure can cause the entire system to stop working. 2) what is risk appetite? - answer the amount of risk a company is willing to accept 3) what is residual risk? - answer risk leftover after applying initial contermeasures 4) what is homomorphic encryption? - answer allows data to remain encrypted while it is being processed. 5) what is the data processor? - answer anyone who processes personal information on behalf of a data controller - storing, printing, etc 6) what is label-based discovery? - answer labels created by the data owner greatly aid any discovery 7) what is metadata-based discovery? - answer data about data, metadata is a listing of traits and characteristics about specific data elements and sets. 8) what is information rights management (irm)? - answer controlling how data is used, restricting data access to unauthorized persons (prevents copy and paste, control screenshots, manage printing, restrict editing). 9) what is dmca? - answer created to provide additional protections to creative works in digital formats. 10) what is file-based storage? - answer data stored and displayed just as with a file structure in the traditional environment, as files and folders. 11) what is block storage? - answer where data is split into fixed-size chunks (blocks) and each block is stored separately, with a unique address. 12) where is block storage typically seen and why? - answer databases, for fast low-latency access 13) what is transparent encryption? - answer encryption that happens automatically, without user intervention, during read/write operations. (database encryption key is stored in the database itself) 14) what is randomization? - answer replacement of data with random characters. 15) what is shuffling? - answer using different entries from within the same data set to represent the data. 16) what is portability? - answer the general level of ease or difficulty when transferring data out of a providers data center 17) what is vendor lock in? - answer when a provider uses proprietary data format or medium to store information and the customer may not be able to move their data to another provider 18) what is vendor lock out? - answer when the cloud provider goes out of business, is acquired by another company, or ceases operation for any reason. The concern is whether the customer can still readily access and recover their data 19) what is another term for whole disk encryption? - answer whole-instance encryption 20) what is volume encryption? - answer only encrypts a partition on a hard drive instead of the whole disk 21) what is the the american institute of certified public accountants (aicpa)? - answer sets accounting and auditing standards, created the soc framework 22) what is the nist sp 800-37? - answer the guide for implementing the risk management framework (rmf). 23) what is the csa star program? - answer it integrates best practices, standards, and auditing processes to assess and validate the security practices of csps. 24) what is anonymization? - answer the process of removing or altering personal information from data so that the person it refers to can't be identified—directly or indirectly. 25) what is ephemeral cloud storage? - answer temporary storage provided to a cloud instance, short lived, usually not backed up 26) which cloud computing characteristic allows customers to manage their utilization by only paying for the resources used? - answer metered service 27) what is on-demand self-service? - answer users can increase storage and processing power as needed without csp interaction 28) which cloud consideration refers to the ability of the infrastructure to withstand disruptive events? - answer resiliency 29) what is a network security group? - answer a virtual firewall used in cloud environments to control inbound and outbound traffic 30) what is federal risk and authorization management program (fedramp)? - answer to make sure cloud services used by the u.s. government are secure, reliable, and compliant with federal standards. 31) which design pillar represents the ability of a workload to execute its intended function accurately and consistently when it is expected to? - answer reliability 32) what is interoperability? - answer interoperability in cloud computing means the ability of different cloud systems, services, or components to work together — even if they're from different vendors or platforms. 33) what is a bc/dr toolkit? - answer secure container (physical or digital) that includes everything needed to effectively respond to a disaster or business interruption. 34) what are virtualization toolsets? - answer software tools that help create, manage, monitor, and optimize virtual machines 35) what is hardware abstraction? - answer enables the flexibility and mobility virtualized environments need to achieve high availability. 36) what are loosely coupled clusters compared to tightly coupled clusters? - answer loosely coupled clusters = nodes operate more independently, often over a network Tightly coupled clusters = nodes share memory or are closely integrated 37) which storage architecture contains nodes that are logically connected rather than physically connected? - answer loosely coupled clusters 38) which storage architecture contains nodes that are directly connected and acts almost like a single machine? - answer tightly coupled clusters 39) what is cloud bursting? - answer a hybrid cloud setup where an application runs in a private cloud or data center, but "bursts" into a public cloud when demand spikes—ensuring performance without overprovisioning. 40) what is a cloud broker? - answer a middleman that helps you choose, combine, or improve cloud services from different providers. 41) what is the difference between rapid elasticity and scalability? - answer scalability = the ability of a system to handle increased workload by adding more resources. Rapid elasticity = the ability to automatically scale resources up or down quickly based on demand. 42) what is reversibility in cloud computing? - answer the ability to safely and efficiently move your data, applications, and services out of a cloud provider 43) what is structured data? - answer data organized in a fixed format like rows and columns, like databases 44) what are some examples of semi-structured data? - answer json, xml, nosql databases. 45) what is unstructured data? - answer data without a predefined format, like a word document 46) what is data mapping? - answer the process of matching fields from one data source to another to ensure correct data flow between systems. 47) who is the data subject? - answer the individual to whom the personal data belongs. 48) who is the data owner? - answer the person or department responsible for the data's accuracy, access, and usage.