2Which of the following is NOT a cloud computing characteristic that impacts incidence response?
The on demand self-service nature of cloud computing environments.
Privacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.
The possibility of data crossing geographic or jurisdictional boundaries.
Object-based storage in a private cloud.
The resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.
Answer: D
3How can web security as a service be deployed for a cloud consumer?
By proxying or redirecting web traffic to the cloud provider
By utilizing a partitioned network drive
On the premise through a software or appliance installation
Both A and C
None of the above
Answer: D
4When configured properly, logs can track every code, infrastructure, and configuration change and connect it back to the submitter and approver, including the test results.
False
True
Answer: B
5What of the following is NOT an essential characteristic of cloud computing?
Broad Network Access
Measured Service
Third Party Service
Rapid Elasticity
Resource Pooling
Answer: C
6Without virtualization, there is no cloud.
False
True
Answer: B
7All assets require the same continuity in the cloud.
False
True
Answer: A
8Which type of application security testing tests running applications and includes tests such as web vulnerability testing and fuzzing?
Code Review
Static Application Security Testing (SAST)
Unit Testing
Functional Testing
Dynamic Application Security Testing (DAST)
Answer: E
9CCM: The Cloud Service Delivery Model Applicability column in the CCM indicates the applicability of the cloud security control to which of the following elements?
Mappings to well-known standards and frameworks
Service Provider or Tenant/Consumer
Physical, Network, Compute, Storage, Application or Data
SaaS, PaaS or IaaS
Answer: D
10Any given processor and memory will nearly always be running multiple workloads, often from different tenants.