Q71. Which is the set of technologies that are designed to detect conditions indicative of a security vulnerability in an application in its running state?

Q72. Who is responsible for infrastructure security in Infrastructure as a service(IaaS) model?

Q73. Interoperability is the ability that enables the migration of cloud services from one cloud provider to another or between public cloud and a private cloud.

Q74. Which of following responsibilities can never be transferred. even during cloud adoption?

Q75. How does running applications on distinct virtual networks and only connecting networks as needed help?

Q76. Containers are highly portable code execution environments.

Q77. Lack of standard data formats and service interfaces can lead to:

Q78. Which of the following adds abstraction layer on top of networking hardware and decouples network control plane from the data plane?

Q79. Which statement best describes the Data Security Lifecycle?

Q80. ANF and ONF are referred in which of the following ISO standards?

Q81. ENISA: Which is not one of the five key legal issues common across all scenarios:

Q82. Which term is used to describe the use of tools to selectively degrade portions of the cloud to continuously test business continuity?

Q83. “Cloud provider acquisition” as a risk fall under which of the following categories?

Q84. Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

Q85. John’s Laptop was stolen. He had saved all his passwords in a text file stored in his laptop. Adversary used the passwords from the text file and gained access to company’s network and sensitive databases, of which John was the data base administrator. It resulted in theft of thousands of customer information. This incident could have been prevented by?

Q86. In which service model, cloud consumer is responsible to manage authorizations and entitlements only?

Q87. Which of the following Standards is normally followed to manage Enterprise Risk?

Q88. Which of the following is most commonly used to program Application Programming Interface(API)?

Q89. Which of the following is NOT true about CSA Cloud control metrix (CCM)?

Q90. When deploying Security as a Service in a highly regulated industry or environment, what should both parties agree on in advance and include in the SLA?

Q91. When the data is transferred to third party. who is ultimately responsible for security of data?

Q92. The entity that has the primary relationship with an individual from whom his/her PII is collected is known as:

Q93. Policy documentation and training is a:

Q94. Which of the following is a key tool for enabling and enforcing separation and isolation in multitenancy?

Q95. Sending data to a provider’s storage over an API is likely as much more reliable and secure than setting up your own SFTP server on a VM in the same provider