Network environments and virtual instances shall be designed and configured to restrict and monitor traffic between trusted and untrusted connections. These configurations shall be reviewed at least annually, and supported by a documented justification for use for all allowed services, protocols, ports, and by compensating controls. Which of the following controls BEST matches this control description?

• A.Change Detection
• B.Virtual Instance and OS Hardening
• C.Network Vulnerability Management
• D.Network Security

Comment: *

Name: *

Email: *

Verification: *

Prioritizing assurance activities for an organization's cloud services portfolio depends PRIMARILY on an organization's ability to:

• A.maintain a comprehensive cloud service inventory.
• B.schedule frequent reviews with high-risk cloud service providers.
• C.develop plans using a standardized risk-based approach.
• D.collate views from various business functions using cloud services.

Comment: *

Name: *

Email: *

Verification: *

Which statement best describes why it is important to know how data is being accessed?

• A.The devices used to access data use a variety of applications or clients and may have different security characteristics.
• B.The devices used to access data use a variety of operating systems and may have different programs installed on them.
• C.The device may affect data dispersion.
• D.The devices used to access data may have differentownership characteristics.
• E.The devices used to access data have different storage formats.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an example of a corrective control?

• A.A central anti-virus system installing the latest signature files before allowing a connection to the network
• B.Privileged access to critical information systems requiring a second factor of authentication using soft token
• C.Unsuccessful access attempts being automatically logged for investigation
• D.All new employees having standard access rights until their manager approves privileged rights

Comment: *

Name: *

Email: *

Verification: *

SAST testing is performed by:

• A.scanning the application source code.
• B.scanning the application interface.
• C.scanning all infrastructure components.
• D.performing manual actions to gain control of the application.

Comment: *

Name: *

Email: *

Verification: *