Online Access Free Managing-Cloud-Security Practice Test

Which role ensures that third parties take adequate technical and organizational security measures to safeguard data?

• A.Cloud provider
• B.Cloud user
• C.Data controller
• D.Data subject

Which action should be taken to ensure that unencrypted network traffic is protected?

• A.Data should be transmitted using generic routing encapsulation (GRE).
• B.Data should be transmitted using the secure socket layer (SSL) protocol.
• C.Data should be transmitted using the transport layer security (TLS) protocol.
• D.Data should be transmitted after it is compressed and password protected using gunzip (GZ).

An organization needs to provide space where security administrators can centrally monitor network traffic and events and respond to threats or outages. What should the organization create?

• A.Disaster response team (DRT)
• B.Emergency response team (ERT)
• C.Security operations center (SOC)
• D.Network operations center (NOC)

Which action should a customer take to add an extra layer of protection to the data stored in a public cloud environment?

• A.Use database activity monitoring (DAM)
• B.Use additional encryption for sensitive files and folders
• C.Use web application firewalls (WAFs)
• D.Use block storage instead of file storage

Which jurisdictional protection factor should be known if personally identifiable information (PII) is to be stored in the cloud?

• A.Jurisdictional location of availability zone
• B.Jurisdictional location of data
• C.Physical location of load balancer
• D.Physical location of the web application firewall (WAF)