Study guides, Class notes & Summaries

NIST 500-292 Cloud Computing Security Reference Architecture NIST 500-299 Security Reference Architecture NIST 800-037 Risk Management Frameworks NIST 800-053 Privacy Control NIST 800-057 Encryption NIST 800-061 Incident Handling Guide NIST 800-064 Secure Software Development Lifecycle NIST 800-122 PII

Which phase of the cloud data life cycle allows both read and process functions to be performed? A Create B Archive C Store D Share A Which phase of the cloud data security life cycle typically occurs simultaneously with creation? A Share B Store C Use D Destroy B Which phase of the cloud data life cycle uses content delivery networks? A Destroy B Archive C Share D Create C Which phase of the cloud data life cycle is associated with crypto-shredding? A Share B Use

What are the 4 characteristics of cloud computing? Broad network access On-demand services Resource Pooling Measured or "metered" service What NIST publication number defines cloud computing? 800-145 What ISO/IEC standard provides information on cloud computing? 17788 What is another way of describing a functional business requirement? necessary What is another way of describing a nonfunctional business requirement? not necessary What is the greatest driver pushing orgs to the cloud? C...

NIST 800-145 Cloud Computing Definition A model for enabling ubiquitous, convenient, on- demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction Business Impact Analysis (BIA) An assessment of the priorities given to each asset and process within the organization. A proper analysis should consider the effect any harm or loss of each asset might mean to the organiza...

ISO/IEC 27037:2012 Guide for collecting, identifying, and preserving electronic evidence. ISO/IEC 27041:2015 Guide for incident investigations ISO/IEC 27042:2015 Guide for digital evidence analysis ISO/IEC 27043:2015 Incident investigation principles and processes ISO/IEC 27050-1:2016 Overview and principles for eDiscovery NIST SP 800-37 Guide for implementing the Risk Management Framework ENISA Identifies 35 types of risks for cloud computing

Elasticity This is the flexibility of allocating resources as needed for immediate usage, instead of purchasing resources according to other variables Simplicity Usage and administration of cloud services ought to be transparent to cloud customers and users; from their perspective, a digital data service is paid for and can be used, with very little additional input other than what is necessary to perform their duties. Scalability The organization's computing needs won't remain static: th...

What are the 4 characteristics of cloud computing? - correct answers Broad network access On-demand services Resource Pooling Measured or "metered" service What NIST publication number defines cloud computing? - correct answers 800-145 What ISO/IEC standard provides information on cloud computing? - correct answers 17788 What is another way of describing a functional business requirement? - correct answers necessary What is another way of describing a nonfunctional business requir...

QUESTIONS AND ANSWERS

QUESTIONS AND ANSWERS