Which of the following is considered an administrative control?

Which of the following is a risk in the cloud environment that is not existing or is as prevalent in the legacy environment?
Response:

You are the security manager for an online retail sales company with 100 employees and a production environment hosted in a PaaS model with a major cloud provider.
Your company policies have allowed for a BYOD workforce that work equally from the company offices and their own homes or other locations. The policies also allow users to select which APIs they install and use on their own devices in order to access and manipulate company data.
Of the following, what is a security control you'd like to implement to offset the risk(s) incurred by this practice?

In order to comply with regulatory requirements, which of the following secure erasure methods would be available to a cloud customer using volume storage within the IaaS service model?

The cloud deployment model that features joint ownership of assets among an affinity group is known as:
Response: