Cloud Computing & Virtualization Flashcards

Which statement about data residency is most relevant to government contract data in the cloud?

Answer: Location of storage and personnel with access may be restricted by contract or regulation

Many contracts limit data to US locations and to US persons, so residency must be verified.

What is the primary purpose of virtual machine isolation?

Answer: To prevent one VM from accessing or interfering with another VM's resources

Isolation keeps guests separated so compromise or failure of one does not spill into others.

A provider's administrator is a foreign national and your contract restricts access to US persons. Which action is most appropriate?

Answer: Verify contract requirements and raise it with the contracting authority and provider before proceeding

Access restrictions in the contract must be confirmed and any conflicts addressed with the customer and provider.

Which type of cloud audit report gives assurance about a provider's controls over security, availability, and confidentiality?

Answer: SOC 2 Type II

A SOC 2 Type II report evaluates the operating effectiveness of trust services controls over a period of time.

What should happen to a virtual machine image that held sensitive data when it is no longer needed?

Answer: Sanitize or destroy it per applicable media sanitization requirements

Images and their storage must be sanitized according to approved procedures to prevent data recovery.

Which cloud deployment model combines private and public clouds, allowing data and applications to move between them?

Answer: Hybrid cloud

Hybrid cloud links two or more distinct cloud infrastructures to enable portability between them.

Why is multifactor authentication especially important for cloud management consoles?

Answer: Consoles control provisioning and access, so a stolen password could expose many resources

Management consoles hold broad privileges, so a single compromised credential can have wide impact.