Online Access Free Managing-Cloud-Security Exam Questions

Which regulation provides a guide for implementing the risk management framework?

• A.ISO 27001
• B.ISO 31000:2009
• C.NIST SP 800-37
• D.PCI-DSS

As part of training to help the data center engineers understand different attack vectors that affect the infrastructure, they work on a set of information about access and availability attacks that was presented. Part of the labs requires the engineers to identify different threat vectors and their names. Which threat prohibits the use of data by preventing access to it?

• A.Denial of service
• B.Brute force
• C.Rainbow tables
• D.Encryption

An organization is implementing a new hybrid cloud deployment and wants all employees to provide a username, password, and security token before accessing any of the cloud resources. Which type of security control is the organization leveraging for its employees?

• A.Authorization
• B.Web application firewall (WAF)
• C.Access control list (ACL)
• D.Authentication

An organization that primarily uses a remote work model is reviewing the documentation of various insurance providers to become eligible for cybersecurity insurance. Competitive insurance providers require the organization to implement security controls to ensure only authorized personnel can access the network, data, emails, and other administrative information. Which commonly required control should the organization implement before applying for cybersecurity insurance from these competitive insurance providers?

• A.Multifactor authentication (MFA)
• B.Application whitelisting
• C.Trusted platform module (TPM)
• D.Network segmentation

An organization needs to provide space where security administrators can centrally monitor network traffic and events and respond to threats or outages. What should the organization create?

• A.Disaster response team (DRT)
• B.Network operations center (NOC)
• C.Emergency response team (ERT)
• D.Security operations center (SOC)