An external audit is conducted on an organization's cloud Information Technology (IT) infrastructure. This organization has been using cloud IT services for several years, but its use is not regulated in any way by the organization and security audits have never been conducted in the past. Which task will be the MOST challenging to conduct an effective security audit?

Which of the following BEST effective when protecting against insider threats?

An organization intends to host an application on a multi-tenant Infrastructure as a Service (IaaS) platform.
Which of the following measures are MOST important to ensure proper protection of sensitive information?

An audit report of security operations has listed some anomalies with third parties being granted access to the internal systems and data without any restrictions.
Which of the following will BEST help remediate this issue?