D320 - Managing Cloud Security Practice
Questions with Verified Correct Answers
All of the following are techniques to enhance the portability of cloud data in order to
minimize the potential of vendor lock-in except:
A. Avoiding proprietary data formats
B. Using IRM and DTP solutions widely throughout the cloud operation
C. Ensuring there are no physical limitations to moving
D. Ensuring favorable contract terms to support portability
B
Which of the following is a technique used to attenuate risks to the cloud environment,
resulting in loss or theft of a device used for remote access?
A. Remote kill switch
B. Dual control
C. Muddling
D. Safe harbor
A
Each of the following are dependencies that must be considered when reviewing the BIA
after cloud migration except:
A. The cloud provider's suppliers
B. The cloud provider's vendors
,C. The cloud provider's utilities
D. The cloud provider's resellers
D
When reviewing the BIA after a cloud migration, the organization should take into
account new factors related to data breach impacts. One of these new factors is:
A. Legal liability can't be transferred to the cloud provider.
B. Many states have data breach notification laws.
C. Breaches can cause the loss of proprietary data.
D. Breaches can cause the loss of intellectual property.
A
The cloud customer will have the most control of their data and systems and the cloud
provider will have the least amount of responsibility in which cloud computing
arrangement?
A. IaaS
B. PaaS
C. SaaS
D. Community cloud
A
After a cloud migration, the BIA should be updated to include a review of the new risks
and impacts associated with cloud operations; this review should include an analysis of
the possibility of vendor lock-in/lock-out. Analysis of this risk may not have to be
performed as a new effort because a lot of the material that would be included is
, already available from which of the following?
A. NIST
B. The cloud provider
C. The cost-benefit analysis the organization conducted when deciding on cloud
migration
D. Open-source providers
C
A poorly negotiated cloud service contract could result in all the following detrimental
effects except:
A. Vendor lock-in
B. Malware
C. Unfavorable terms
D. Lack of necessary services
B
All of the following are cloud computing risks in a multitenant environment except:
A. Risk of loss/disclosure due to legal seizures
B. Information bleed
C. DDoS
D. Escalation of privilege
C
Questions with Verified Correct Answers
All of the following are techniques to enhance the portability of cloud data in order to
minimize the potential of vendor lock-in except:
A. Avoiding proprietary data formats
B. Using IRM and DTP solutions widely throughout the cloud operation
C. Ensuring there are no physical limitations to moving
D. Ensuring favorable contract terms to support portability
B
Which of the following is a technique used to attenuate risks to the cloud environment,
resulting in loss or theft of a device used for remote access?
A. Remote kill switch
B. Dual control
C. Muddling
D. Safe harbor
A
Each of the following are dependencies that must be considered when reviewing the BIA
after cloud migration except:
A. The cloud provider's suppliers
B. The cloud provider's vendors
,C. The cloud provider's utilities
D. The cloud provider's resellers
D
When reviewing the BIA after a cloud migration, the organization should take into
account new factors related to data breach impacts. One of these new factors is:
A. Legal liability can't be transferred to the cloud provider.
B. Many states have data breach notification laws.
C. Breaches can cause the loss of proprietary data.
D. Breaches can cause the loss of intellectual property.
A
The cloud customer will have the most control of their data and systems and the cloud
provider will have the least amount of responsibility in which cloud computing
arrangement?
A. IaaS
B. PaaS
C. SaaS
D. Community cloud
A
After a cloud migration, the BIA should be updated to include a review of the new risks
and impacts associated with cloud operations; this review should include an analysis of
the possibility of vendor lock-in/lock-out. Analysis of this risk may not have to be
performed as a new effort because a lot of the material that would be included is
, already available from which of the following?
A. NIST
B. The cloud provider
C. The cost-benefit analysis the organization conducted when deciding on cloud
migration
D. Open-source providers
C
A poorly negotiated cloud service contract could result in all the following detrimental
effects except:
A. Vendor lock-in
B. Malware
C. Unfavorable terms
D. Lack of necessary services
B
All of the following are cloud computing risks in a multitenant environment except:
A. Risk of loss/disclosure due to legal seizures
B. Information bleed
C. DDoS
D. Escalation of privilege
C
