PRACTICE QUESTIONS AND STUDY GUIDE ACCURATE
EXAM COMPLETE REAL QUESTIONS AND CORRECT
VERIFIED SOLUTIONS WITH DETAILED RATIONALES
(RELIABLE ANSWERS) CURRENTLY UPDATED
VERSION 2026 EDITION
This set has the following topics:
Security Policies, Risk Management & Governance
Software Project & Team Management
Privacy, Ethics & Legal Issues
Incident Response & Digital Forensics
Capstone Project & Research Methods
Cloud Computing for Data Science
Software Maintenance & Evolution
Database Security & Privacy
Software Economics & Licensing
Enterprise Network Security
Network Security Architecture & Operations
Authentication, Authorization & Access Control
Emerging & Advanced Topics
Configuration, Release Management & DevOps
Distributed, Cloud & Emerging Software Systems
Introduction & Overview of Operating Systems
Protection & Security
Virtualization & Cloud OS
Multi-Agent Systems & Game Theory
Emerging & Specialized Databases
Structured Query Language (SQL)
Database Recovery
Security in Distributed Systems
Software Development Life-Cycle (SDLC) Models
Introduction to Cybersecurity
Malware & Threat Analysis
Ethics, Privacy & Governance
Fault Tolerance & Reliable Systems
Web & Application Security
Software Testing, Verification & Validation
,1: Implements Secure Solutions
Which technology should be implemented to ensure secure
communication between on-site enterprise systems and a cloud
platform
A. Domain Name System Security Extensions (DNSSEC)
B. Internet Protocol Security (IPSec) VPN
C. Web Application Firewall (WAF)
D. Data Loss Prevention (DLP)
Correct Answer: B. Internet Protocol Security (IPSec) VPN
Explanation:
• IPSec VPN is designed to secure communication over an IP
network. It encrypts the entire IP packet for secure transmission
between on-site systems and cloud platforms, ensuring data
integrity and confidentiality.
• DNSSEC ensures the integrity of DNS responses but doesn't
provide secure communication between systems.
• WAF protects web applications by filtering and monitoring HTTP
traffic but is not used for secure communication between systems.
• DLP prevents data breaches by monitoring and controlling data
flows, but it doesn't establish secure communication channels.
,2: Implements Operations
Which phase of the cloud data lifecycle is most likely to overlap
with the 'Create' phase in terms of implementing security controls
A. Share
B. Store
C. Use
D. Destroy
Correct Answer: B. Store
Explanation:
• Store often overlaps with the Create phase because as soon as
data is created, it usually needs to be securely stored. Security
controls, such as encryption, should be implemented at this stage.
• Share and Use happen after data is stored.
• Destroy is the final stage in the lifecycle and typically occurs after
data is no longer needed.
, 3: Conducts Risk Management
Which risk management approach involves completely eliminating a
risk because it exceeds the organization's risk appetite
A. Mitigation
B. Avoidance
C. Transfer
D. Acceptance
Correct Answer: B. Avoidance
Explanation:
• Avoidance involves eliminating the risk entirely, typically when the
potential impact is too great or when controls cannot adequately
reduce the risk to an acceptable level.
• Mitigation involves reducing the risk to an acceptable level.
• Transfer involves shifting the risk to a third party, such as through
insurance.
• Acceptance involves acknowledging the risk and choosing to bear
it without further action.