C838 - Managing Cloud Security Final OA/ 343
Quizzes & Correct Ans.
_____ drive security decisions. - Answer: business requirements
All of these are reasons because of which an organization may want to consider
cloud migration, except: - Answer: Elimination of risks
The generally accepted definition of cloud computing includes all of the following
characteristics except: - Answer: negating the need for backups
When a cloud customer uploads PII to a cloud provider, who becomes ultimately
responsible for the security of that PII? - Answer: cloud customer
We use which of the following to determine the critical paths, processes, and
assets of an organization? - Answer: BIA
Page 1 of 45
,If a service or solution does not meet all of the specified key characteristics listed
below, it is said to be not true cloud computing. Please select the valid cloud
computing characteristics out of the terms identified below.
Each correct answer represents a complete solution. Choose all that apply. -
Answer: On-demand self-service
Broad network access
Resource pooling
measured service
All of these technologies have made cloud service viable except: - Answer: smart
hubs
The cloud deployment model that features organizational ownership of the
hardware and infrastructure, and usage only by members of that organization, is
known as: - Answer: private
The cloud deployment model that features ownership by a cloud provider, with
services offered to anyone who wants to subscribe, is known as: - Answer: Public
The cloud deployment model that features joint ownership of assets among an
affinity group is known as: - Answer: Community
Page 2 of 45
,If a cloud customer wants a secure, isolated sandbox in order to conduct software
development and testing, which cloud service model would probably be best? -
Answer: PaaS
If a cloud customer wants a fully-operational environment with very little
maintenance or administration necessary, which cloud service model would
probably be best? - Answer: SaaS
If a cloud customer wants a bare-bones environment in which to replicate their
own enterprise for BC/DR purposes, which cloud service model would probably be
best? - Answer: IaaS
Which of the following is not a common cloud service model? - Answer:
Programming as a Service
Cloud Access Security Brokers (CASBs) might offer all the following services
EXCEPT: - Answer: BC / DR / COOP
If a cloud customer cannot get access to the cloud provider, this affects what
portion of the CIA triad? - Answer: Availability
All of the following can result in vendor lock-in except: - Answer: Statutory
compliance
Page 3 of 45
, The risk that a cloud provider might go out of business and the cloud customer
might not be able to recover data is known as: - Answer: vendor lock-out
All of these are features of cloud computing except: - Answer: Reversed charging
configuration
Cloud vendors are held to contractual obligations with specified metrics by: -
Answer: SLAs
Gathering business requirements can aid the organization in determining all of
this information about organizational assets, except: - Answer: Usefulness
The BIA can be used to provide information about all of the following, except: -
Answer: Secure Acquisition
Risk appetite for an organization is determined by which of the following? -
Answer: Senior management
What is the risk left over after controls and countermeasures are put in place? -
Answer: Residual
All the following are ways of addressing risk, except: - Answer: Reversal
Which of the following best describes risk? - Answer: The likelihood that a threat
will exploit a vulnerability
Page 4 of 45
Quizzes & Correct Ans.
_____ drive security decisions. - Answer: business requirements
All of these are reasons because of which an organization may want to consider
cloud migration, except: - Answer: Elimination of risks
The generally accepted definition of cloud computing includes all of the following
characteristics except: - Answer: negating the need for backups
When a cloud customer uploads PII to a cloud provider, who becomes ultimately
responsible for the security of that PII? - Answer: cloud customer
We use which of the following to determine the critical paths, processes, and
assets of an organization? - Answer: BIA
Page 1 of 45
,If a service or solution does not meet all of the specified key characteristics listed
below, it is said to be not true cloud computing. Please select the valid cloud
computing characteristics out of the terms identified below.
Each correct answer represents a complete solution. Choose all that apply. -
Answer: On-demand self-service
Broad network access
Resource pooling
measured service
All of these technologies have made cloud service viable except: - Answer: smart
hubs
The cloud deployment model that features organizational ownership of the
hardware and infrastructure, and usage only by members of that organization, is
known as: - Answer: private
The cloud deployment model that features ownership by a cloud provider, with
services offered to anyone who wants to subscribe, is known as: - Answer: Public
The cloud deployment model that features joint ownership of assets among an
affinity group is known as: - Answer: Community
Page 2 of 45
,If a cloud customer wants a secure, isolated sandbox in order to conduct software
development and testing, which cloud service model would probably be best? -
Answer: PaaS
If a cloud customer wants a fully-operational environment with very little
maintenance or administration necessary, which cloud service model would
probably be best? - Answer: SaaS
If a cloud customer wants a bare-bones environment in which to replicate their
own enterprise for BC/DR purposes, which cloud service model would probably be
best? - Answer: IaaS
Which of the following is not a common cloud service model? - Answer:
Programming as a Service
Cloud Access Security Brokers (CASBs) might offer all the following services
EXCEPT: - Answer: BC / DR / COOP
If a cloud customer cannot get access to the cloud provider, this affects what
portion of the CIA triad? - Answer: Availability
All of the following can result in vendor lock-in except: - Answer: Statutory
compliance
Page 3 of 45
, The risk that a cloud provider might go out of business and the cloud customer
might not be able to recover data is known as: - Answer: vendor lock-out
All of these are features of cloud computing except: - Answer: Reversed charging
configuration
Cloud vendors are held to contractual obligations with specified metrics by: -
Answer: SLAs
Gathering business requirements can aid the organization in determining all of
this information about organizational assets, except: - Answer: Usefulness
The BIA can be used to provide information about all of the following, except: -
Answer: Secure Acquisition
Risk appetite for an organization is determined by which of the following? -
Answer: Senior management
What is the risk left over after controls and countermeasures are put in place? -
Answer: Residual
All the following are ways of addressing risk, except: - Answer: Reversal
Which of the following best describes risk? - Answer: The likelihood that a threat
will exploit a vulnerability
Page 4 of 45
