To identify key actors and requirements, which of the following MUST be considered when designing a cloud compliance program?

• A.Cloud service provider, internal and external audit perspectives
• B.Business/organizational, governance, cloud and risk perspectives
• C.Enterprise risk management, data protection, privacy and legal perspectives
• D.Key stakeholders, enterprise risk management, and Internal audit perspectives

Comment: *

Name: *

Email: *

Verification: *

Which of the following defines the criteria designed by the American Institute of Certified Public Accountants (AICPA) to specify trusted services?

• A.Security, confidentiality, availability, privacy and trustworthiness
• B.Security, applicability, availability, privacy and processing integrity
• C.Security, confidentiality, availability, privacy and processing integrity
• D.Security, data integrity, availability, privacy and processing integrity

Comment: *

Name: *

Email: *

Verification: *

Which cloud storage technology is basically a virtual hard drive for instanced or VMs?

• A.Platform
• B.Database
• C.Object storage
• D.Application
• E.Volume storage

Comment: *

Name: *

Email: *

Verification: *

How does running applications on distinct virtual networks and only connecting networksas needed help?

• A.It reduces the blast radius of a compromised system
• B.It enables you to configure applications around business groups
• C.It provides dynamic and granular policies with less management overhead
• D.It reduces hardware costs
• E.It locks down access and provides stronger data security

Comment: *

Name: *

Email: *

Verification: *

A CSP providing cloud services currently being used by the United States federal government should obtain which of the following to assure compliance to stringent government standards?

• A.ISO/IEC 27001:2013 Certification
• B.CSA STAR Level Certificate
• C.Multi-Tier Cloud Security (MTCS) Attestation
• D.FedRAMP Authorization

Comment: *

Name: *

Email: *

Verification: *