ln order to determine critical assets and processes of the organization, it must first conduct a:

• A.Risk Assessment
• B.Business Impact Analysis(BIA)
• C.Datacentre monitoring
• D.Host hardening

Comment: *

Name: *

Email: *

Verification: *

Which of the following decouples the network control plane from the data plane and allows to abstract networking from the tradition a limitations of a LAN?

• A.VLANS
• B.Traditional Networking
• C.Software defined networking
• D.Converged Networking

Comment: *

Name: *

Email: *

Verification: *

CCM: A hypothetical company called: "Health4Sure" is located in the United States and provides cloud based services for tracking patient health. The company is compliant with HIPAA/HITECH Act among other industry standards. Health4Sure decides to assess the overall security of their cloud service against the CCM toolkit so that they will be able to present this document to potential clients.
Which of the following approach would be most suitable to assess the overall security posture of Health4Sure's cloud service?

• A.The CCM domain controls are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered as a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls thoroughly. This approach saves time while being able to assess the company's overall security posture in an efficient manner.
• B.The CCM domains are not mapped to HIPAA/HITECH Act. Therefore Health4Sure should assess the security posture of their cloud service against each and every control in the CCM. This approach will allow a thorough assessment of the security posture.
• C.The CCM columns are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered ad a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls. This approach will save time.

Comment: *

Name: *

Email: *

Verification: *

Which of the following reports is of most interest to the customer but may not be provided by Cloud Service Provider?

• A.SOC1 Type I
• B.SOC2 Type I
• C.SOC3
• D.SOC2 Type II

Comment: *

Name: *

Email: *

Verification: *

Identifying the specific threats against servers and determine the effectiveness of existing security controls in counteracting the threats. is known as:

• A.Risk Mitigation
• B.Risk Assessment
• C.Risk Management
• D.Risk Determination

Comment: *

Name: *

Email: *

Verification: *