D320 - Managing Cloud Security Exam/ 700
Questions with Correct Answers.
An organization implemented an information rights management (IRM) solution to prevent
critical data from being copied without permission and a cloud backup solution to ensure that
the critical data is protected from storage failures.
Which IRM challenge will the organization need to address?
A) Jurisdictional conflicts
B) Agent conflicts
C) Replication restrictions
D) Execution restrictions - Answer: C
A data center engineer is tasked with the destruction of data on solid-state drives (SSDs). The
engineer must ensure that the data is not able to be retrieved.
Page 1 of 201
,Which data destruction action should the engineer take to meet this goal?
A) Overwriting
B) Crypto-shredding
C) Wiping
D) Degaussing - Answer: B
An organization wants to gather and interpret logs from its cloud environment.
Which system should the organization use for this task?
A) Simple Network Management Protocol (SNMP)
B) Security Information and Event Management (SIEM)
C) Business Process Management (BPM)
D) Distributed System Management (DSM) - Answer: B
An organization with a Security Information and Event Management (SIEM) system wants to
minimize errors or missed issues due to human log analysis.
Which SIEM policy should the organization use in this case?
A) Automated analysis of metadata
B) Automated analysis of data sets
C) Manually generated analysis of data sets
D) Manually generated analysis of metadata - Answer: B
Which software type allows multiple operating systems to run on the same physical server in a
virtualized environment?
A) Hypervisor
Page 2 of 201
,B) Container
C) Quantum computing
D) Blockchain technology - Answer: A
What is the name of the process of automatically provisioning, configuring, and managing
virtual machines and other resources in a virtualized environment?
A) Continuous deployment
B) Orchestration
C) Programmability
D) Continuous integration - Answer: B
Which cloud computing characteristic allows customers to manage their utilization by only
paying for the resources used?
A) Metered service
B) Broad network access
C) Rapid elasticity
D) On-demand self-service - Answer: A
Which cloud deployment model allows customers to take advantage of service and price
differences from two or more cloud vendors?
A) Public cloud
B) Hybrid cloud
C) Multi-cloud
D) Private cloud - Answer: C
Page 3 of 201
, Which cloud consideration refers to the ability of the infrastructure to withstand disruptive
events?
A) Governance
B) Availability
C) Resiliency
D) Maintenance - Answer: C
Which technology is used to protect the confidentiality of data from on-path attacks?
A) Bring your own device (BYOD)
B) Data loss prevention (DLP)
C) Information Rights Management (IRM)
D) Transport Layer Security (TLS) - Answer: D
Which technology allows cryptographic secrets to be held in a secure way so that they can be
recovered by parties who have authorization?
A) Revocation
B) Key distribution
C) Key escrow
D) Lifetime - Answer: C
Which safety control acts as a virtual firewall in cloud environments?
A) Traffic inspection
B) Zero trust
C) Network security group
D) Geofencing - Answer: C
Page 4 of 201
Questions with Correct Answers.
An organization implemented an information rights management (IRM) solution to prevent
critical data from being copied without permission and a cloud backup solution to ensure that
the critical data is protected from storage failures.
Which IRM challenge will the organization need to address?
A) Jurisdictional conflicts
B) Agent conflicts
C) Replication restrictions
D) Execution restrictions - Answer: C
A data center engineer is tasked with the destruction of data on solid-state drives (SSDs). The
engineer must ensure that the data is not able to be retrieved.
Page 1 of 201
,Which data destruction action should the engineer take to meet this goal?
A) Overwriting
B) Crypto-shredding
C) Wiping
D) Degaussing - Answer: B
An organization wants to gather and interpret logs from its cloud environment.
Which system should the organization use for this task?
A) Simple Network Management Protocol (SNMP)
B) Security Information and Event Management (SIEM)
C) Business Process Management (BPM)
D) Distributed System Management (DSM) - Answer: B
An organization with a Security Information and Event Management (SIEM) system wants to
minimize errors or missed issues due to human log analysis.
Which SIEM policy should the organization use in this case?
A) Automated analysis of metadata
B) Automated analysis of data sets
C) Manually generated analysis of data sets
D) Manually generated analysis of metadata - Answer: B
Which software type allows multiple operating systems to run on the same physical server in a
virtualized environment?
A) Hypervisor
Page 2 of 201
,B) Container
C) Quantum computing
D) Blockchain technology - Answer: A
What is the name of the process of automatically provisioning, configuring, and managing
virtual machines and other resources in a virtualized environment?
A) Continuous deployment
B) Orchestration
C) Programmability
D) Continuous integration - Answer: B
Which cloud computing characteristic allows customers to manage their utilization by only
paying for the resources used?
A) Metered service
B) Broad network access
C) Rapid elasticity
D) On-demand self-service - Answer: A
Which cloud deployment model allows customers to take advantage of service and price
differences from two or more cloud vendors?
A) Public cloud
B) Hybrid cloud
C) Multi-cloud
D) Private cloud - Answer: C
Page 3 of 201
, Which cloud consideration refers to the ability of the infrastructure to withstand disruptive
events?
A) Governance
B) Availability
C) Resiliency
D) Maintenance - Answer: C
Which technology is used to protect the confidentiality of data from on-path attacks?
A) Bring your own device (BYOD)
B) Data loss prevention (DLP)
C) Information Rights Management (IRM)
D) Transport Layer Security (TLS) - Answer: D
Which technology allows cryptographic secrets to be held in a secure way so that they can be
recovered by parties who have authorization?
A) Revocation
B) Key distribution
C) Key escrow
D) Lifetime - Answer: C
Which safety control acts as a virtual firewall in cloud environments?
A) Traffic inspection
B) Zero trust
C) Network security group
D) Geofencing - Answer: C
Page 4 of 201
