NO.415 Under EU law, a cloud customer who gives sensitive data to a cloud provider is still legally responsible for the damages resulting from a data breach caused by the provider; the EU would say that it is the cloud customer’s fault for choosing the wrong provider.
This is an example of insufficient ____________.

NO.416 User access to the cloud environment can be administered in all of the following ways except:

NO.417 All of the following are activities that should be performed when capturing and maintaining an accurate, secure system baseline except ____________.

NO.418 Many aspects of cloud computing bring enormous benefits over a traditional data center, but also introduce new challenges unique to cloud computing.
Which of the following aspects of cloud computing makes appropriate data classification of high importance?

NO.419 Which of the following is a possible negative aspect of bit-splitting?

NO.420 Which cloud storage type uses an opaque value or descriptor to categorize and organize data?

NO.421 What is the cloud service model in which the customer is responsible for administration of the OS?
Response:

NO.422 Which of the following tasks within a SaaS environment would NOT be something the cloud customer would be responsible for?

NO.423 Which protocol operates at the network layer and provides for full point-to-point encryption of all communications and transmissions?

NO.424 What concept does the “R” represent with the DREAD model?

NO.425 The BIA can be used to provide information about all the following, except:
Response:

NO.426 Which component of ITIL involves handling anything that can impact services for either internal or public users?

NO.427 Your company has just been served with an eDiscovery order to collect event data and other pertinent information from your application during a specific period of time, to be used as potential evidence for a court proceeding.
Which of the following, apart from ensuring that you collect all pertinent data, would be the MOST important consideration?
Response:

NO.428 What is the concept of isolating an application from the underlying operating system for testing purposes?

NO.429 A DLP solution/implementation has three main components.
Which of the following is NOT one of the three main components?

NO.430 Which of the following is considered an external redundancy for a data center?

NO.431 DLP solutions can aid in deterring loss due to which of the following?

NO.432 Which of the following threat types involves an application that does not validate authorization for portions of itself beyond when the user first enters it?

NO.433 ISO/IEC has established international standards for many aspects of computing and any processes or procedures related to information technology.
Which ISO/IEC standard has been established to provide a framework for handling eDiscovery processes?

NO.434 What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?

NO.435 Which of the following roles involves the provisioning and delivery of cloud services?

NO.436 Which data protection strategy would be useful for a situation where the ability to remove sensitive data from a set is needed, but a requirement to retain the ability to map back to the original values is also present?

NO.437 In the cloud motif, the data processor is usually: