An audit has identified that business units have purchased cloud-based applications without ITs support. What is the GREATEST risk associated with this situation?

• A.The applications could be modified without advanced notice.
• B.The applications may not reasonably protect data.
• C.The applications are not included in business continuity plans (BCPs).
• D.The application purchases did not follow procurement policy.

Comment: *

Name: *

Email: *

Verification: *

A CSP contracts for a penetration test to be conducted on its infrastructures. The auditor engages the target with no prior knowledge of its defenses, assets, or channels. The CSP's security operation center is not notified in advance of the scope of the audit and the test vectors. Which mode is selected by the CSP?

• A.Reversal
• B.Tandem
• C.Double blind
• D.Double gray box

Comment: *

Name: *

Email: *

Verification: *

Your SLA with your cloudprovider ensures continuity for all services.

• A.False
• B.True

Comment: *

Name: *

Email: *

Verification: *

In all three cloud deployment models, (IaaS, PaaS, and SaaS), who is responsible for the patching of the hypervisor layer?

• A.Patching on hypervisor layer is not required
• B.Cloud service customer
• C.Shared responsibility
• D.Cloud service provider

Comment: *

Name: *

Email: *

Verification: *

An auditor is performing an audit on behalf of a cloud customer. For assessing security awareness, the auditor should:

• A.assess the existence and adequacy of a security awareness training program at both the cloud customer's organization and the cloud service provider's organization.
• B.not assess the security awareness training program as it is each organization's responsibility
• C.assess the existence and adequacy of a security awareness training program at the cloud service provider's organization as the cloud customer hired the auditor to review and cloud service.
• D.assess the existence and adequacy of a security awareness training program at the cloud customer's organization as they hired the auditor.

Comment: *

Name: *

Email: *

Verification: *