NO.47 In cloud services. risks and responsibilities are shared between the cloud provider and customer.
however. which of the following holds true?

NO.48 A SIEM device should be tuned in regularly to:

NO.49 Which is the primary tool for governance in Cloud Computing environment?

NO.50 Which of the following is NOT normally a method for detecting and preventing data migration into the cloud?

NO.51 “Standards like the SSAE16 have a defined scope. which includes both what is assessed (e.g. which of the provider’s services) as well as which controls are assessed. A provider can thus “pass” an audit that doesn’t include any security controls. which isn’t overly useful for security and risk managers. ” True or False?

NO.52 Which of the following type of risk assessment most effectively supports cost-benefit analyses of alternative risk responses or courses of action?

NO.53 What goal is most directly achieved by implementing controls and policies that aim to provide a complete view of data use and exposure in a cloud environment?

NO.54 What is the characteristic that allows the cloud provider to meet various demands from customers while remaining financially viable?

NO.55 Which of the following is not an abuse or misuse of cloud services?

NO.56 CCM: A hypothetical start-up company called “ABC” provides a cloud based IT management solution. They are growing rapidly and therefore need to put controls in place in order to manage any changes in
their production environment. Which of the following Change Control & Configuration Management production environment specific control should they implement in this scenario?

NO.57 CCM: The Cloud Service Delivery Model Applicability column in the CCM indicates the applicability of the cloud security control to which of the following elements?

NO.58 Which of the following statements best defines the “authorization” as a component of identity, entitlement, and access management?

NO.59 As we move from Software as a Service Model towards Infrastructure as a service Model. security responsibility decreases from towards cloud consumer from that of Cloud Service Provider.

NO.60 Which one of the following is the key tool of Cloud Governance?

NO.61 Which of the following is NOT atypical approach of Key Storage in cloud?

NO.62 What defines easiness to move and reuse application components regardless of the provider, platform,
0S, infrastructure, location, storage, format of data or APIs, how well applications work together, and how well new applications work with other solutions present in the business, organization, or provider’s existing architecture?

NO.63 The most pragmatic option for data disposal in the cloud is which of the following?

NO.64 Amount of risk that the leadership and stakeholders of an organization are willing to accept. is known as:

NO.65 Which of the followinglS0 Standard provides Code of practice for information security controls based on IS0/IEC 27002for cloud services?

NO.66 In Platform as a Service (PaaS), platform security is a responsibility of:

NO.67 When designing a cloud-native application that requires scalable and durable data storage, which storage option should be primarily considered?