Which of the following standards is designed to be used by organizations for cloud services that intend to select controls within the process of implementing an Information Security Management System based on ISO/IEC 27001?

• A.NIST SP 800-146
• B.ISO/IEC 27002
• C.CSA Cloud Control Matrix (CCM)
• D.ISO/IEC 27017:2015

Comment: *

Name: *

Email: *

Verification: *

Which of the following metrics are frequently immature?

• A.Metrics around specific Software as a Service (SaaS) application services
• B.Metrics around Infrastructure as a Service (IaaS) storage and network environments
• C.Metrics around Infrastructure as a Service (IaaS) computing environments
• D.Metrics around Platform as a Service (PaaS) development environments

Comment: *

Name: *

Email: *

Verification: *

To qualify for CSA STAR attestation for a particular cloud system, the SOC 2 report must cover:

• A.Cloud Control Matrix (CCM) and ISO/IEC 27001:2013 controls.
• B.ISO/IEC 27001: 2013 controls.
• C.all Cloud Control Matrix (CCM) controls and TSPC security principles.
• D.maturity model criteria.

Comment: *

Name: *

Email: *

Verification: *

Why is a service type of network typically isolated on different hardware?

• A.It requires unique security
• B.It manages resource pools for cloud consumers
• C.It requires distinct access controls
• D.It has distinct functions from other networks
• E.It manages the traffic between other networks

Comment: *

Name: *

Email: *

Verification: *

SAST testing is performed by:

• A.scanning the application source code.
• B.scanning the application interface.
• C.scanning all infrastructure components.
• D.performing manual actions to gain control of the application.

Comment: *

Name: *

Email: *

Verification: *