Online Access Free 312-40 Exam Questions

Scott Herman works as a cloud security engineer in an IT company. His organization has deployed a 3-tier web application in the same Google Cloud Virtual Private Cloud. Each tier (web interface (UI), API, and database) is scaled independently of others. Scott Herman obtained a requirement that the network traffic should always access the database using the API and any request coming directly from the web interface to the database should not be allowed. How should Scott configure the network with minimal steps?

• A.By adding each tier to a different subnetwork
• B.By setting up software-based firewalls on individual VMs
• C.By adding tags to each tier and setting up routes to allow the desired traffic flow
• D.By adding tags to each tier and setting up firewall rules to allow the desired traffic flow

For securing data, an AWS customer created a key in the Alabama region to encrypt their data in the California region. Two users were added to the key along with an external AWS account.
When the AWS customer attempted to encrypt an S3 object, they observed that the key is not listed. What is the reason behind this?

• A.AWS does not support external AWS accounts
• B.It takes time for new keys to be listed
• C.Encryption key should be in the same region
• D.S3 cannot be integrated with KMS

Trevor Holmes works as a cloud security engineer in a multinational company. Approximately
7 years ago, his organization migrated its workload and data to the AWS cloud environment.
Trevor would like to monitor malicious activities in the cloud environment and protect his organization's AWS account, data, and workloads from unauthorized access. Which of the following Amazon detection services uses anomaly detection, machine learning, and integrated threat intelligence to identify and classify threats and provide actionable insights that include the affected resources, attacker IP address, and geolocation?

• A.Amazon GuardDuty
• B.Amazon Security Hub
• C.Amazon Inspector
• D.Amazon Macie

Rebecca Gibel has been working as a cloud security engineer in an IT company for the past
5 years. Her organization uses cloud-based services. Rebecca's organization contains personal information about its clients, which is encrypted and stored in the cloud environment. The CEO of her organization has asked Rebecca to delete the personal information of all clients who utilized their services between 2011 and 2015. Rebecca deleted the encryption keys that are used to encrypt the original data; this made the data unreadable and unrecoverable. Based on the given information, which deletion method was implemented by Rebecca?

• A.Crypto-Shredding
• B.Nulling Out
• C.Data Erasure
• D.Data Scrubbing

Daffod is an American cloud service provider that provides cloud-based services to customers worldwide. Several customers are adopting the cloud services provided by Daffod because they are secure and cost- effective. Daffod complies with the cloud computing law enacted in the US to realize the importance of information security in the economic and national security interests of the US. Based on the given information, which law order does Daffod adhere to?

• A.FERPA
• B.CLOUD
• C.FISMA
• D.ECPA