cloud security

Do not put confidential information, including personally identifiable information (PII) into the Cloud.

• True

• False

The major security concerns of Cloud Computing are

• IT Leaders struggle to trust relatively new and unfamiliar cloud providers as part of their extended enterprises.

• IT professionals question whether cloud providers have the levels of infrastructure security to be able to ward off cyber-attacks.

• Providers have the mechanisms in place to be able to manage, measure and report on industry regulations? And can they be accountable if they fail to comply?

• IT managers are right to look for service level guarantees. But in the case of the cloud, response times cannot be guaranteed since data travels through the Internet.

• All of the above

_______are responsible for keeping their applications up to date – and must therefore ensure they have a patch strategy (to ensure that their applications are screened from malware and hackers scanning for vulnerabilities that allow unauthorized access to their data within the cloud to be gained).

• Customers

• Providers

Cloud security protects

• Data

• Applications

• Infrastructure

• All of the above

Cloud providers ensure that the ________in the cloud are secure by implementing testing and acceptance procedures for outsourced or packaged application code.

• Applications available as a service

• Infrastructure as a service

• Platform as a service

------------ refers to digitally confirming the identity of the entity requesting access to some protected information

• Authentication

• SSO

• SECURITY OF DATA

• AUTHORIZATION

------------ Enables the users to access multiple systems or applications after signing in only once,for the first time

• SSO

• AUTHENTICATION

• AUTHORIZATION

• All of the above

OBJECTIVES OF AUDITING

• VERIFY DATA PROTECTION POLICIES, ACCESS POLICY UPDATION

• ENCRYPTING AND DECRYPTION OF DATA

------------ REFERS TO DIGITALLY SPECIFY THE ACCESS RIGHTS TO PROTECTED RESOURCES USING ACCESS POLICIES

• AUTHORIZATION

• AUTHENTICATION

• SECURITY OF DATA

• AUDITING

What is a possible risk of cloud computing?

• Lack of Access to Data

• Full control over the data

• Storage of data without control over the location of where the data is stored

• Lack of the ability to back up data