Cloud+ - Chapter 4 Review

Robert has been tasked with creating a security implementation that segments his employer's e-commerce design to allow for policy enforcement. What are some of the areas that he is investigating? (Choose three)

• Network

• Automation

• Storage

• Compute

• APIs

Where can MFA tokens be obtained? (Choose two)

• Python app

• Smartphone app

• Automation systems

• Keyfob

• Cloud vendor management dashboard

Hank just completed running some security automation scripts on his new fleet of application virtual machines. After applying intrusion detection, virus, and malware protection on the Linux images, he notices an increase in which VM metric on his management dashboard?

• DMA

• BIOS

• CPU

• IPSec

• I/O

What technology was instrumental in the growth of cloud services?

• XML

• Python

• Automation

• Authentication

• Scripting

Carl is planning his cloud migration and must meet HIPAA requirements for confidential storage of data at rest in the cloud. What services must be addressed by Carl? (Choose two)

• Virtual private network

• Storage

• Client-side

• Database

What is a common cloud-based GUI used to get an overview of your security operations?

• Puppet automation

• Gemalto system

• Dashboard

• Vendor-based security appliance

Who is responsible for the security of customer data stored in the cloud?

• Cloud provider

• Compliance agency

• Cloud customer

• Shared responsibility

What are systems that automate cloud operations called?

• Authentication

• Federation

• Orchestration

• Ephemeral

• API

RESTful APIs using XML and JSON can be used to provision what cloud-based services? (Choose all that apply)

• Firewalls

• Load balancers

• Virtual Machines

• DNS servers

• Durable storage volumes

Jim has a critical server in the application tier of his cloud-based deployment. He is looking at a device-specific security solution to add defense-in-depth capabilities to his currently deployed network-based security defenses. He has been researching ways to mitigate potential hacking attempts. What is a good solution for him?

• DMZ

• IDS

• IPS

• Classifications automation

• HIDS