What is a sign that an organization has adopted a shift-left concept of code release cycles?

• A.Large entities with slower release cadences and geographically dispersed systems
• B.A waterfall model to move resources through the development to release phases
• C.Maturity of start-up entities with high-iteration to low-volume code commits
• D.Incorporation of automation to identify and address software code problems early

Comment: *

Name: *

Email: *

Verification: *

What is true of security as it relates to cloud network infrastructure?

• A.You should applycloud firewalls on a per-network basis.
• B.You should implement a default allow with cloud firewalls and then restrict as necessary.
• C.You should deploy your cloud firewalls identical to the existing firewalls.
• D.You should implement a default deny with cloud firewalls.
• E.You should always open traffic between workloads in the same virtual subnet for better visibility.

Comment: *

Name: *

Email: *

Verification: *

A certification target helps in the formation of a continuous certification framework by incorporating:

• A.scope description and security attributes to be tested.
• B.service level objective and service qualitative objective.
• C.CSA STAR level 2 attestation.
• D.frequency of evaluating security attributes.

Comment: *

Name: *

Email: *

Verification: *

With regard to the Cloud Controls Matrix (CCM), the Architectural Relevance is a feature that enables the filtering of security controls by:

• A.relevant architecture frameworks such as the NIST Enterprise Architecture Model, the Federal Enterprise Architecture Framework (FEAF), The Open Group Architecture Framework (TOGAF). and the Zachman Framework for Enterprise Architecture.
• B.relevant architectural paradigms such as Client-Server, Mainframe, Peer-to-Peer, and SmartClient-Backend.
• C.relevant architectural components such as Physical, Network, Compute, Storage, Application, and Data.
• D.relevant delivery models such as Software as a Service (SaaS), Platform as a Service (PaaS), Infrastructure as a Service (laaS).

Comment: *

Name: *

Email: *

Verification: *

Which statement best describes why it is important to know how data is being accessed?

• A.The devices used to access data may have differentownership characteristics.
• B.The devices used to access data use a variety of applications or clients and may have different security characteristics.
• C.The devices used to access data have different storage formats.
• D.The devices used to access data use a variety of operating systems and may have different programs installed on them.
• E.The device may affect data dispersion.

Comment: *

Name: *

Email: *

Verification: *