A.The applications are not included in business continuity plans (BCPs).

B.The application purchases did not follow procurement policy.

C.The applications may not reasonably protect data.

D.The applications could be modified without advanced notice.

A.Both B and D.

B.Maintaining customer managed key management and revoking ordeleting keys from the key management system to prevent the data from being accessed again.

C.Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.

D.Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.

E.Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.

A.False

B.True

A.Network intrusion detection

B.Return or destruction of information

C.Patch management process

D.Data retention, backup, and recovery

A.CSA Cloud Control Matrix (CCM)

B.General Data Protection Regulation (GDPR)

C.ISO 27001

D.Federal Information Processing Standard (FIPS) 140-2