CLOUD SECURITY IMPLEMENTATION
PLAN EXAM SCRIPT WITH VERIFIED
QUESTIONS AND ANSWERS
●● Which regulation protects personal data of European Union
residents?
Answer: GDPR
●● Which law is often referred to as the Brazilian version of GDPR?
Answer: LGPD
●● Which framework provides a catalog of security and privacy
controls?
Answer: NIST SP 800-53
●● A healthcare organization storing patient data in the cloud must
comply with which regulation?
Answer: HIPAA
●● What does CSA stand for?
Answer: Cloud Security Alliance
, ●● What is the main purpose of CSA STAR?
Answer: Cloud security registry and transparency program
●● Which security tool focuses on detecting cloud misconfigurations?
Answer: CSPM
●● Which cloud security solution protects virtual machines and
containers?
Answer: CWPP
●● What is the primary purpose of CIEM?
Answer: Manage permissions and identities
●● Which security solution acts as a gatekeeper between users and cloud
services?
Answer: CASB
●● Which tool specifically discovers and classifies sensitive data?
Answer: DSPM
●● What does SIEM do?
Answer: Centralizes log collection and threat analysis
PLAN EXAM SCRIPT WITH VERIFIED
QUESTIONS AND ANSWERS
●● Which regulation protects personal data of European Union
residents?
Answer: GDPR
●● Which law is often referred to as the Brazilian version of GDPR?
Answer: LGPD
●● Which framework provides a catalog of security and privacy
controls?
Answer: NIST SP 800-53
●● A healthcare organization storing patient data in the cloud must
comply with which regulation?
Answer: HIPAA
●● What does CSA stand for?
Answer: Cloud Security Alliance
, ●● What is the main purpose of CSA STAR?
Answer: Cloud security registry and transparency program
●● Which security tool focuses on detecting cloud misconfigurations?
Answer: CSPM
●● Which cloud security solution protects virtual machines and
containers?
Answer: CWPP
●● What is the primary purpose of CIEM?
Answer: Manage permissions and identities
●● Which security solution acts as a gatekeeper between users and cloud
services?
Answer: CASB
●● Which tool specifically discovers and classifies sensitive data?
Answer: DSPM
●● What does SIEM do?
Answer: Centralizes log collection and threat analysis
