Which of the following is NOT a characteristic of cloud computing?
Correct Answer: D
The characteristics of cloud computing are 1. 0n-demand self-service: A consumer can unilaterally provision computing capabilities, such as server time and network storage, as needed automatically without requiring human interaction with each service provider. 2. Broad network access: Capabilities are available over the network and accessed through standard mechanisms that promote use by heterogeneous thin or thick client platforms(e.g, mobile phones, tablets, laptops and workstations). 3. Resource pooling: The provider's computing resources are pooled to serve multiple consumers using a multi-tenant model, with different physical and virtual resources dynamically assigned and reassigned according to consumer demand. There is a sense of location independence in that the customer generally has no control or knowledge over the exact location of the provided resources but may be able to specify location at a higher level of abstraction(e.g, country, state or datacenter). Examples of resources include storage, processing, memory and network bandwidth. 4. Rapid elasticity: Capabilities can be elastically provisioned and released, in some cases automatically, to scale rapidly outward and inward commensurate with demand. To the consumer, the capabilities available for provisioning often appear to be unlimited and can be appropriated in any quantity at anytime. 5. Measured service: Cloud systems automatically control and optimize resource use by leveraging a metering capability at some level of abstraction appropriate to the type of service(e.g, storage, processing, bandwidth and active user accounts). Resource usage can be monitored, controlled and reported, providing transparency for the provider and consumer.
Question 27
Who decides the risk appetite of the organization?
Correct Answer: A
It is the Senior Management who decides the appetite of the organization
Question 28
Which communication methods within a cloud environment must be exposed for partners or consumers to access database information using a web application?
Correct Answer: E
Explanation/Reference:
Question 29
Which of the following is the key difference between cloud computing and traditional virtualization?
Correct Answer: D
Orchestration is the difference between cloud computing and traditional virtualization; virtualization abstracts resources. but it typically lacks the orchestration to pool them together and deliver them to customers on demand. instead relying on manual processes. Ref: CSA Security Guidelines V4.0
Question 30
The granting of right to access to a user. program or process. is called:
Correct Answer: B
Authorization is the process of granting of right to access to a user, program or process. It should not be confused with Authentication.
