QUESTION 67
Your cloud and on-premisesinfrastructures should always use the same network address ranges.

QUESTION 68
An important consideration when performing a remote vulnerability test of a cloud-based application is to

QUESTION 69
Which of the following cloud deployment models would BEST meet the needs of a startup software development organization with limited initial capital?

QUESTION 70
An organization has an ISMS implemented, following ISO 27001 and Annex A controls. The CIO would like to migrate some of the infrastructure to the cloud. Which of the following standards would BEST assist in identifying controls to consider for this migration?

QUESTION 71
When migrating to a cloud environment, which of the following should be the PRIMARY driver for the use of encryption?

QUESTION 72
Which of the following metrics are frequently immature?

QUESTION 73
The Cloud Octagon Model was developed to support organizations:

QUESTION 74
Which of the following should be the FIRST step to establish a cloud assurance program during a cloud migration?

QUESTION 75
Which of the following is a cloud-native solution designed to counter threats that do not exist within the enterprise?

QUESTION 76
Which of the following is the MOST feasible way to validate the performance of CSPs for the delivery of technology resources?

QUESTION 77
Which of the following are the three MAIN phases of the cloud controls matrix (CCM) mapping methodology?

QUESTION 78
Which statement best describes why it is important to know how data is being accessed?

QUESTION 79
Which statement about compliance responsibilities and ownership of accountability is correct?

QUESTION 80
A third-party service provider is hosting a private cloud for an organization. Which of the following findings during an audit of the provider poses the GREATEST risk to the organization?

QUESTION 81
Which attack surfaces, if any, does virtualization technology introduce?

QUESTION 82
Changes to which of the following will MOST likely influence the expansion or reduction of controls required to remediate the risk arising from changes to an organization’s SaaS vendor?

QUESTION 83
What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?

QUESTION 84
A Dot Release of Cloud Control Matrix (CCM) indicates what?

QUESTION 85
Which of the following is a cloud-specific security standard?

QUESTION 86
ENISA: “VMhopping” is:

QUESTION 87
An organization has an ISMS implemented, following ISO 27001 and Annex A controls. The CIO would like to migrate some of the infrastructure to the cloud. Which of the following standards would BEST assist in identifying controls to consider for this migration?

QUESTION 88
What data center and physical security measures should a cloud customer consider when assessing a cloud service provider?