In the context of Infrastructure as a Service (IaaS), a vulnerability assessment will scan virtual machines to identify vulnerabilities in:

• A.only application infrastructure contained within the customer's instances.
• B.only application infrastructure contained within the CSP's instances.
• C.both operating system and application infrastructure contained within the CSP's instances.
• D.both operating system and application infrastructure contained within the customer's instances

Comment: *

Name: *

Email: *

Verification: *

How can virtual machine communications bypass network security controls?

• A.VM images can contain rootkits programmed to bypass firewalls
• B.Hypervisors depend upon multiple network interfaces
• C.Most network security systems do not recognize encrypted VM traffic
• D.The guest OS can invoke stealth mode
• E.VM communications may use a virtual network on the same hardware host

Comment: *

Name: *

Email: *

Verification: *

In cloud computing, with whom does the responsibility and accountability for compliance lie?

• A.The cloud service customer is responsible for compliance, and the cloud service provider is accountable.
• B.The cloud service customer is responsible and accountable for compliance.
• C.The cloud service provider is responsible for compliance, and the cloud service customer is accountable.
• D.The cloud service provider is responsible and accountable for compliance.

Comment: *

Name: *

Email: *

Verification: *

When migrating to a cloud environment, which of the following should be the PRIMARY driver for the use of encryption?

• A.Organizational security policies
• B.Cost-benefit analysis
• C.Cloud Service Provider encryption capabilities
• D.The presence of PII

Comment: *

Name: *

Email: *

Verification: *

CCM: The following list of controls belong to which domain of the CCM?
GRM 06 - Policy GRM 07- Policy Enforcement GRM 08 - Policy Impact on Risk Assessments GRM 09 - Policy Reviews GRM 10 - Risk Assessments GRM 11 - Risk Management Framework

• A.Governance and Retention Management
• B.Governance and Risk Management
• C.Governing and Risk Metrics

Comment: *

Name: *

Email: *

Verification: *