A.The metrics defining the service level required to achieve regulatory objectives.

B.The regulations that are pertinent to the contract and how to circumvent them.

C.The type of security software which meets regulations and the number of licenses that will be needed.

D.The cost per incident for security breaches of regulated information.

E.The duration of time that a security violation can occur before the client begins assessing regulatory fines.

A.Ask the cloud provider to open more ports.

B.Nothing. There are simply limitations around the data that can be logged in the cloud.

C.Ask the cloud provider to close more ports.

D.You can instrument the technology stack with your own logging.

E.Nothing. The cloud provider must make the information available.

A.Arbitrary contract termination by acquiring company

B.Mass layoffs may occur

C.Non-binding agreements put at risk

D.Resource isolation may fail

E.Provider may change physical location

A.Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.

B.Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.

C.Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.

D.Both B and D.

E.Maintaining customer managed key management and revoking or deleting keys from the key management system to prevent the data from being accessed again.

A.False

B.True