Test D13

In order to be considered security-as-a-service (SecaaS) according to the Cloud Security Alliance (CSA), the technology must __________. and Risk (STAR) Registry Level 3

• A. reside entirely within one jurisdiction and Risk (STAR) Registry Level 3

• B. serve cloud environments and Risk (STAR) Registry Level 3

• C. be certified according to the CSA Security, Trust, Assurance, and Risk (STAR) Registry Level 3

• D. be delivered as a cloud service

In order to be considered security-as-a-service (SecaaS) according to the Cloud Security Alliance (CSA), the technology must __________. requirements

• A. meet the NIST definition of a cloud service requirements

• B. be accessed via virtual private networks (VPNs) requirements

• C. use transport layer security (TLS) requirements

• D. satisfy GDPR (General Data Protection Regulation) requirements

All of the following are potential benefits of security-as-a-service (SecaaS), except __________. [choose all that apply]

• A. reduced capital investment
• B. data leakage
• C. expertise
• D. intelligence-sharing
• E. insulation of clients

All of the following are potential benefits of security-as-a-service (SecaaS), except __________ . [choose all that apply].

• A. scaling

• B. cost

• C. cloud-computing benefits

• D. changing providers

• E. migration

Why might security-as-a-service (SecaaS) providers have difficulty meeting the regulatory requirements of potential customers?

• A. cloud is global

• B. customers won’t pay for it

• C. providers are uneducated

• D. regulators hate the cloud

Which term describes a cloud security gateway?

• A. the Security, Trust, Assurance, and Risk (STAR) Registry
• B. a Cloud Access Security Broker (CASB)
• C. the Cloud Controls Matrix (CCM)
• D. the General Data Protection Regualtion (GDPR)

is one type of security-as-a-service (SecaaS).

• A. transparent encryption

• B. Type 2 hypervisor

• C. federated identity brokers

• D. remote meetings

Security-as-a-service (SecaaS) providers might offer strong authentication capabilities, such as mobile device applications and __________.

• A. user training and awareness

• B. AES encryption

• C. flotation devices

• D. tokens for multifactor authentication

Cloud-based security-as-a-service (SecaaS) offerings for web security gateways might include both proxy capabilities and __________.

• A. redirecting web traffic

• B. deep packet inspection

• C. heuristic algorithms

• D. the Turing test

Security-as-a-service providers might offer all the following types of solutions except __________. [select all that apply]

A. security management

B. financial oversight

C. business continuity and disaster recovery (BCDR)

D. distributed denial of service (DDOS) protection

E. legal advice

F. encryption and key management

• A. security management

• B. financial oversight

• C. business continuity and disaster recovery (BCDR)

• D. distributed denial of service (DDOS) protection

• E. legal advice