Which of the following would be considered as a factor to trust in a cloud service provider?

• A.The level of proved technical skills
• B.The level of open source evidence available
• C.The level of exposure for public information
• D.The level of willingness to cooperate

Comment: *

Name: *

Email: *

Verification: *

What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?

• A.Both B and D.
• B.Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.
• C.Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.
• D.Maintaining customer managed key management and revoking ordeleting keys from the key management system to prevent the data from being accessed again.
• E.Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be an IS auditor's GREATEST concern when reviewing an outsourcing arrangement with a third-party cloud service provider to host personally identifiable data?

• A.The outsourcing contract does not contain a right-to-audit clause.
• B.The organization's servers are not compatible with the third party's infrastructure
• C.The data is not adequately segregated on the host platform.
• D.Fees are charged based on the volume of data stored by the host.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective for an auditor to understand the organization's context for a cloud audit is to:

• A.determine whether the organization has carried out control self-assessment and validated audit reports of the cloud service providers (CSP).
• B.validate the organization's performance effectiveness utilizing cloud service providers (CSP) solutions.
• C.validate whether an organization has a cloud audit plan in place.
• D.validate an understanding of the organization's current state and how the cloud audit plan fits into the existing audit approach.

Comment: *

Name: *

Email: *

Verification: *

Which of the following metrics are frequently immature?

• A.Metrics around Platform as a Service (PaaS) development environments
• B.Metrics around Infrastructure as a Service (IaaS) storage and network environments
• C.Metrics around specific Software as a Service (SaaS) application services
• D.Metrics around Infrastructure as a Service (IaaS) computing environments

Comment: *

Name: *

Email: *

Verification: *