Configurations and policies for a system can come from a variety of sources and take a variety of formats.
Which concept pertains to the application of a set of configurations and policies that is applied to all systems or a class of systems?
Audits are either done based on the status of a system or application at a specific time or done as a study over a period of time that takes into account changes and processes.
Which of the following pairs matches an audit type that is done over time, along with the minimum span of time necessary for it?
What is the cloud service model in which the customer is responsible for administration of the OS?
What does dynamic application security testing (DAST) NOT entail?
Which of the following is NOT part of a retention policy?
