C838 -Managing Cloud Security
Exam 11 Questions with 100%
Correct Answers.
Key Components of Strong Data Retention Policies
1. Retention periods
2. Applicable regulation
3. Retention formats
4. Data classification
5. Archiving and retrieval procedures
6. Monitoring, maintenance and enforcement
ITAR
International Traffic in Arms Regulations
United States regulation; prohibitions on defense-related exports; can include
cryptography systems.
EAR
Export Administration Regulations
United States regulation; prohibitions on dual-use items (technologies that could be used for both
commercial and military purposes).
The 3 Types of Database Encryption
1. File-level - encrypting the volume or folder of the database, with the encryption engine and
keys residing on the instances attached to the volume; protects from media theft, lost backups,
and external attack but does not protect against attacks with access to the application layer, the
instance's OS, or the database itself
2. Transparent - encrypting the entire database or specific portions, such as tables; encryption
engine resides within the database, and it is transparent to the application; keys usually reside
within the instance, although processing and management of them may also be offloaded to an
external KMS; provides effective protection from media theft, backup system intrusions, and
, certain database and application-level attacks
3. Application-level - encryption engine resides at the application that is utilizing the database;
can act as a robust mechanism to protect against a range of threats, such as compromised
administrative accounts and other database and application-level attacks; it is challenging to
perform indexing, searches, and metadata collection though; can also be challenging due to
the expertise requirements for cryptographic development and integration
Virtualization Risks
1. attacks on the hypervisor
2. guest escape a.k.a. VM escape
3. information bleed
4. data seizure (of host machine)
Forklifting
moving an existing legacy enterprise application to the cloud with little or no code changes
IAM Components
Identity and Access Management
1. Authentication
2. Authorization
3. User management
4. Central user repository
Four Popular Federation Standards
1. SAML (Security Assertion Markup Language); most popular; XML based
2. WS-Federation; uses realms
3. OAuth; often used with mobile apps
4. OpenID Connect; based on Oauth 2; allows developers to authenticate users across
websites and apps
DAM
Exam 11 Questions with 100%
Correct Answers.
Key Components of Strong Data Retention Policies
1. Retention periods
2. Applicable regulation
3. Retention formats
4. Data classification
5. Archiving and retrieval procedures
6. Monitoring, maintenance and enforcement
ITAR
International Traffic in Arms Regulations
United States regulation; prohibitions on defense-related exports; can include
cryptography systems.
EAR
Export Administration Regulations
United States regulation; prohibitions on dual-use items (technologies that could be used for both
commercial and military purposes).
The 3 Types of Database Encryption
1. File-level - encrypting the volume or folder of the database, with the encryption engine and
keys residing on the instances attached to the volume; protects from media theft, lost backups,
and external attack but does not protect against attacks with access to the application layer, the
instance's OS, or the database itself
2. Transparent - encrypting the entire database or specific portions, such as tables; encryption
engine resides within the database, and it is transparent to the application; keys usually reside
within the instance, although processing and management of them may also be offloaded to an
external KMS; provides effective protection from media theft, backup system intrusions, and
, certain database and application-level attacks
3. Application-level - encryption engine resides at the application that is utilizing the database;
can act as a robust mechanism to protect against a range of threats, such as compromised
administrative accounts and other database and application-level attacks; it is challenging to
perform indexing, searches, and metadata collection though; can also be challenging due to
the expertise requirements for cryptographic development and integration
Virtualization Risks
1. attacks on the hypervisor
2. guest escape a.k.a. VM escape
3. information bleed
4. data seizure (of host machine)
Forklifting
moving an existing legacy enterprise application to the cloud with little or no code changes
IAM Components
Identity and Access Management
1. Authentication
2. Authorization
3. User management
4. Central user repository
Four Popular Federation Standards
1. SAML (Security Assertion Markup Language); most popular; XML based
2. WS-Federation; uses realms
3. OAuth; often used with mobile apps
4. OpenID Connect; based on Oauth 2; allows developers to authenticate users across
websites and apps
DAM
