Q38. Which of the following is NOT of the essential characterstics as defined by NIST?

Q39. For third-party audits or attestations, what is critical for providers to publish and customers to evaluate?

Q40. Which of the following type of risk assessment most effectively supports cost-benefit analyses of alternative risk responses or courses of action?

Q41. In volume storage, what method is often used to support resiliency and security?

Q42. Which statement best describes the impact of Cloud Computing on business continuity management?

Q43. Where does the encryption engine and key reside when doing file-level encryption?

Q44. According to CSA Security Guidelines, there are four layers of Logical Model for cloud computing. Which of the following is not one of the layers as defined by Cloud Security Alliance?

Q45. Which of the following leverages virtual network topologies to run more. smaller. and more isolated networks without incurring additional hardware costs that historically make such models prohibitive?

Q46. What is the primary focus during the Preparation phase of the Cloud Incident Response framework?

Q47. “Resource usage can be monitored, controlled, and reported, providing transparency for both the provider and consumer of the utilized service. ” Which of the following characteristics defines this?

Q48. What would you call logic/procedures running on a shared database platform as?

Q49. Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?

Q50. Which of the following is one of the five essential characteristics of cloud computing as defined by NIST?

Q51. Lack of standard data formats and service interfaces can lead to:

Q52. Which one of the following is not one the cloud deployment models?

Q53. In the context of cloud security, what is the primary benefit of implementing Identity and Access Management (IAM) with attributes and user context for access decisions?

Q54. What is the primary purpose of the CSA Security, Trust, Assurance, and Risk (STAR) Registry?

Q55. Insufficient Identity. Credential and Access Management can lead to which of the following?

Q56. Which approach creates a secure network, invisible to unauthorized users?

Q57. All assets require the same continuity in the cloud.

Q58. How can virtual machine communications bypass network security controls?

Q59. A unit of processing, which can be in a virtual machine, a container, or other abstraction and always run somewhere on a processor and consume memory is called:

Q60. Cloud Service Provider and Cloud Customer are jointly responsible for ownership of the all risks in shared responsibility model for security across all service models.