20 free sample questions711 in the full practice test
Which of the following roles is responsible for creating cloud components and the testing and validation of services?
Correct answer: C
Explanation:
The cloud service developer is responsible for developing and creating cloud components and services, as well as for testing and validating services.
What is the best source for information about securing a physical asset's BIOS?
Correct answer: C
Explanation:
Vendor documentation from the manufacturer of the physical hardware is the best source of best practices for securing the BIOS.
Which of the following is not a component of contractual PII?
Correct answer: C
This is the CORRECT answer. Value of data is not a standard component of contractual PII arrangements. Contractual PII focuses on processing scope, location, security requirements, and compliance obligations rather than data valuation.
Which of the following concepts refers to a cloud customer paying only for the resources and offerings they use within a cloud environment, and only for the duration that they are consuming them?
Correct answer: B
Explanation:
Measured service is where cloud services are delivered and billed in a metered way, where the cloud customer only pays for those that they actually use, and for the duration of time that they use them.
Which of the following roles involves testing, monitoring, and securing cloud services for an organization?
Correct answer: C
Explanation:
The cloud service administrator is responsible for testing cloud services, monitoring services, administering security for services, providing usage reports on cloud services, and addressing problem reports
What is the only data format permitted with the SOAP API?
Correct answer: D
Explanation:
The SOAP protocol only supports the XML data format.
Which data formats are most commonly used with the REST API?
Correct answer: B
This is the CORRECT answer. XML and JSON (JavaScript Object Notation) are the two most commonly used data formats with REST APIs. XML provides structured data representation while JSON offers a lightweight, human-readable format that is widely preferred for web services.
Which of the following threat types involves an application that does not validate authorization for portions of itself after the initial checks?
Correct answer: D
Explanation:
It is imperative that an application perform checks when each function or portion of the application is accessed, to ensure that the user is properly authorized to access it. Without continual checks each time a function is accessed, an attacker could forge requests to access portions of the application where authorization has not been granted.
Which of the following roles involves overseeing billing, purchasing, and requesting audit reports for an organization within a cloud environment?
Correct answer: A
Explanation:
The cloud service business manager is responsible for overseeing business and billing administration, purchasing cloud services, and requesting audit reports when necessary
What is the biggest concern with hosting a key management system outside of the cloud environment?
Correct answer: A
Explanation:
When a key management system is outside of the cloud environment hosting the application, availability is a primary concern because any access issues with the encryption keys will render the entire application unusable.
Register free to unlock 10 more sample questions
Own this practice test forever.
Any 2 exams per month.
Any 4 exams per month.
Any 12 exams over 3 months.
