Question 61

APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.
  • Question 62

    What should be an organization's control audit schedule of a cloud service provider's business continuity plan and operational resilience policy?
  • Question 63

    Why is a service type of network typically isolated on different hardware?
  • Question 64

    An auditor is performing an audit on behalf of a cloud customer. For assessing security awareness, the auditor should:
  • Question 65

    Which of the following would be MOST important to update once a decision has been made to outsource a critical application to a cloud service provider?