Cloud+ - Chapter 3 Review

Harry is investigating cloud service models and wants to outsource the security responsibility to the cloud company and not have to take responsibility for maintaining and patching OS. Which service model will meet his requirements?

• IaaS

• PaaS

• SaaS

• CaaS

What is the name of the process when a cloud administrator uses their token, username, and password to log into the cloud console? (Choose two)

• Authorization

• Two-factor

• Authentication

• Role-based

Robert has been tasked with creating an access control solution for his company's fleet of server in a hybrid cloud configuration. He has been asked to define the required tasks and then to put users, groups, and servers into this task-based implementation. What type of access control should Robert deploy?

• Mandatory access control

• Nondiscretionary

• Role-based

• Multifactor

What is a report for the public disclosure of financial controls and security reporting that does not contain sensitive and technical information called?

• SOC 1

• SOC 2

• SOC 3

• ISO 27001

• FIPS 140-2

What is the National Institute of Standards and Technology publication that coordinates the requirements and standards for cryptography modules?

• PCI DSS

• FIPS 140-2

• ISO 27001

• FedRAMP

What is a compliance requirement to be certified to meet the U.S. Department of Defense (DoD) security requirements for contractors working with the DoD?

• FedRAMP

• DIACAP

• FISMA

• 123

Mary's boss has asked her to investigate moving the company's medical records to the cloud. What compliance mandate must the cloud provider meet for Mary to recommend deploying her company's operations to the cloud?

• SOC 3

• HIPAA

• MPAA

• ISA 2701

Sue is preparing a change management process to harden various resources. What resources are her responsibility to harden? (Choose three)

• Web servers running on a fleet of VMs

• Self-hosted MySQL server

• Managed elastic filesystem

• Linux virtual snapshot image

• On-premises DHCP server

Harry is the cloud administrator for a company that stores object-based data in a public cloud. Because of regulatory restrictions on user access to sensitive security data, what type of access control would you suggest he implement to meet his company's security policies?

• Mandatory access control

• Nondiscretionary

• Roles

• Multifactor

Christina is investigating obtaining compliance for her employer, which is a large public cloud company. She has been asked to provide a report on the process to enable her company to host a large U.S. federal government database. Which compliance certification is she investigating?

• HIPPA

• FedRAMP

• DIACAP

• FISMA