After finding a vulnerability in an internet-facing server of an organization, a cybersecurity criminal is able to access an encrypted file system and successfully manages to overwrite part of some files with random data.
In reference to the Top Threats Analysis methodology, how would you categorize the technical impact of this incident?
정답:
Question No : 3
To ensure that cloud audit resources deliver the best value to the organization, the PRIMARY step would be to:
정답: Explanation:
It delivers value to the organization are the resources and efforts being dedicated to, and focused on, the higher-risk areas.
Question No : 4
An independent contractor is assessing security maturity of a SaaS company against industry standards. The SaaS company has developed and hosted all their products using the cloud services provided by a third-party cloud service provider (CSP) .
What is the optimal and most efficient mechanism to assess the controls CSP is responsible for?
In the context of Infrastructure as a Service (IaaS), a vulnerability assessment will scan virtual machines to identify vulnerabilities in:
정답:
Question No : 6
A large organization with subsidiaries in multiple locations has a business requirement to organize IT systems to have identified resources reside in particular locations with organizational personnel .
Which access control method will allow IT personnel to be segregated across the various locations?
정답:
Question No : 7
Which of the following is a corrective control that may be identified in a SaaS service provider?
정답:
Question No : 8
In all three cloud deployment models, (IaaS, PaaS, and SaaS), who is responsible for the patching of the hypervisor layer?
정답:
Question No : 9
What areas should be reviewed when auditing a public cloud?
정답:
Question No : 10
One of the Cloud Control Matrix’s (CCM’s) control specifications states that “Independent reviews and assessments shall be performed at least annually to ensure that the organization addresses nonconformities of established policies, standards, procedures, and compliance obligations.”
Which of the following controls under the Audit Assurance and Compliance domain does this match to?
정답:
Question No : 11
Which of the following approaches encompasses social engineering of staff, bypassing of physical access controls and penetration testing?
Which of the following should be the FIRST step to establish a cloud assurance program during a cloud migration?
정답:
Question No : 13
You have been assigned the implementation of an ISMS, whose scope must cover both on premise and cloud infrastructure .
Which of the following is your BEST option?
정답:
Question No : 14
Which plan will guide an organization on how to react to a security incident that might occur on the organization’s systems, or that might be affecting one of their service providers?
정답:
Question No : 15
Which of the following contract terms is necessary to meet a company’s requirement that needs to move data from one CSP to another?
