Which of the following is a fundamental concept of FedRAMP that intends to save costs, time, and staff conducting superfluous agency security assessments?

• A.Use existing, provide many times
• B.Be economical, act deliberately
• C.Use often, provide many times
• D.Do once, use many times

Comment: *

Name: *

Email: *

Verification: *

What is true of security as it relates to cloud network infrastructure?

• A.You should always open traffic between workloads in the same virtual subnet for better visibility.
• B.You should implement a default deny with cloud firewalls.
• C.You should applycloud firewalls on a per-network basis.
• D.You should deploy your cloud firewalls identical to the existing firewalls.
• E.You should implement a default allow with cloud firewalls and then restrict as necessary.

Comment: *

Name: *

Email: *

Verification: *

Which governance domain deals with evaluating how cloudcomputing affects compliance with internal security policies and various legal requirements, such as regulatory and legislative?

• A.Infrastructure Security
• B.Information Governance
• C.Governance and Enterprise Risk Management
• D.Compliance and Audit Management
• E.Legal Issues: Contracts and Electronic Discovery

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be a logical starting point for an auditor who has been engaged to assess the security of an organization's DevOps pipeline?

• A.Conduct an architectural assessment.
• B.Verify the inclusion of security gates in the pipeline.
• C.Verify separation of development and production pipelines.
• D.Review the CI/CD pipeline audit logs.

Comment: *

Name: *

Email: *

Verification: *

What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?

• A.Thephysical location of the data and how it is accessed
• B.The actualsize of the data and the storage format
• C.The implications of storing complex information on simple storage systems
• D.The fragmentation and encryption algorithms employed
• E.The language of the data and how it affects the user

Comment: *

Name: *

Email: *

Verification: *