A defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources is called what?

Which of the following cloud deployment models would BEST meet the needs of a startup software development organization with limited initial capital?

Which governance domain deals with evaluating how cloudcomputing affects compliance with internal security policies and various legal requirements, such as regulatory and legislative?

While performing the audit, the auditor found that an object storage bucket containing PII could be accessed by anyone on the Internet. Given this discovery, what should be the most appropriate action for the auditor to perform?

Which of the following should be of GREATEST concern to an IS auditor reviewing actions taken during a forensic investigation?