QUESTION 488
What are the U.S. State Department controls on technology exports known as?

QUESTION 489
Which of the following is a commonly used tool for maintaining system configurations?

QUESTION 490
DLP solutions can aid in deterring loss due to which of the following?

QUESTION 491
Which of the following is considered an external redundancy for a data center?

QUESTION 492
Cryptographic keys should be secured ________________ .

QUESTION 493
Which of the following is NOT a major regulatory framework?

QUESTION 494
A comprehensive BCDR plan will encapsulate many or most of the traditional concerns of operating a system in any data center.
However, what is one consideration that is often overlooked with the formulation of a BCDR plan?

QUESTION 495
Which of the following are not examples of personnel controls?

QUESTION 496
Why might an organization choose to comply with the ISO 27001 standard?
Response:

QUESTION 497
The cloud customer’s trust in the cloud provider can be enhanced by all of the following except:

QUESTION 498
BCDR strategies typically do not involve the entire operations of an organization, but only those deemed critical to their business.
Which concept pertains to the required amount of time to restore services to the predetermined level?

QUESTION 499
Which cloud service category offers the most customization options and control to the cloud customer?
Response:

QUESTION 500
From a security perspective, what component of a cloud computing infrastructure represents the biggest concern?

QUESTION 501
Which of the following roles is responsible for gathering metrics on cloud services and managing cloud deployments and the deployment processes?

QUESTION 502
What does dynamic application security testing (DAST) NOT entail?

QUESTION 503
All of the following entitles are required to use FedRAMP-accredited Cloud Service Providers except
___________.
Response:

QUESTION 504
What is an experimental technology that is intended to create the possibility of processing encrypted data without having to decrypt it first?

QUESTION 505
When an organization implements an SIEM solution and begins aggregating event data, the configured event sources are only valid at the time it was configured.
Application modifications, patching, and other upgrades will change the events generated and how they are represented over time.
What process is necessary to ensure events are collected and processed with this in mind?

QUESTION 506
Which of the following methods for the safe disposal of electronic records can always be used in a cloud environment?
Response:

QUESTION 507
With software-defined networking (SDN), which two types of network operations are segregated to allow for granularity and delegation of administrative access and functions?

QUESTION 508
Which of the following storage types is most closely associated with a traditional file system and tree structure?

QUESTION 509
For optimal security, trust zones are used for network segmentation and isolation. They allow for the separation of various systems and tiers, each with its own security level.
Which of the following is typically used to allow administrative personnel access to trust zones?

QUESTION 510
Although host-based and network-based IDSs perform similar functions and have similar capabilities, which of the following is an advantage of a network-based IDS over a host-based IDS, assuming all capabilities are equal?