FREE Certificate of Cloud Security Knowledge Questions and Answers
Scoping and review activities can be sped up by:
There is no need to pay for the auditor to be taught on the issue by hiring auditors with experience in the cloud domain. It should be noted that this is mentioned in domain 4 of the guideline (V4) with the phrase "Attempt to select auditors with experience in cloud computing," but does not explain why, as it did in the previous version of the guidance.
What is the CSA phrase for something assigned to an object within a specific namespace?
An Identifier is the means through which one's identity is declared. Persona is identity plus contextual characteristics. The CSA does not use the name Authorizer as SAML is a federation standard.
Access Controls are the greatest solution. Although data security measures are provided, all other alternatives are characterized as controls for enforcing information lifecycle management security, rather than safeguarding and managing data in the cloud. This is shown on page 120 of the guidelines.
Although data security measures are provided, all other alternatives are characterized as controls for enforcing information lifecycle management security, rather than safeguarding and managing data in the cloud. This is shown on page 120 of the guideline.
Documents generated or maintained on the cloud have a greater burden of evidence in a court of law.
Documents should not be regarded as more or less acceptable or reliable just because they were generated or saved in the cloud. This is on page 52 of the Guidance (version 4).
Which key feature allows increasing use of immutable infrastructure? (Select the best solution)
Although on-demand self-service is important in allowing elasticity, the advice adds on page 109, "Elasticity enables greater use of immutable infrastructure."
The Cloud Controls Matrix (CCM) may be used to evaluate a supplier of Security as a Service.
Which logical model layer is identified as the main difference between cloud and conventional computing?
The management plane components of the cloud metastructure are network-enabled and remotely accessible.