D320 Managing Cloud Security - Set 4 - Part 2

Correct Answer: Multi-Factor Authentication (MFA)

MFA is used to prevent unauthorized access by requiring multiple forms of verification. Firewalls protect network access, Data Masking obscures sensitive data, and Disk Encryption secures data at rest.

Correct Answer: Distributing traffic across multiple servers

A load balancer distributes incoming traffic across multiple servers to optimize resource usage and ensure availability. Encryption, identity management, and firewall configuration are handled by other technologies.

Correct Answer: Notify individuals in the event of a breach

Data Breach Notification under GDPR requires organizations to inform individuals if their personal data is compromised. Other principles focus on data minimization, encryption, and integrity.

Correct Answer: SOC 3

SOC 3 reports are designed for public assurance, while SOC 1 focuses on financial controls, SOC 2 audits security and privacy controls, and PCI DSS addresses credit card data security.

Correct Answer: Securing data from unauthorized access

Encryption protects data by ensuring only authorized parties can access it. Availability, preventing outages, and identity management are handled by other security measures.

Correct Answer: Disaster Recovery

Disaster Recovery focuses on restoring services quickly and effectively after a disruption. Incident Management addresses immediate issues, Problem Management prevents incidents, and Capacity Management ensures resources are available.

Correct Answer: Prioritizing risks based on their impact and likelihood

Risk Assessment identifies, analyzes, and prioritizes risks to determine their potential impact and likelihood. Other activities involve encryption, identity verification, and tenant isolation.

Correct Answer: VLANs

VLANs isolate tenants in a multi-tenant environment, ensuring that data and resources are separated. Firewalls control network access, MFA prevents unauthorized access, and SSL/TLS protects data in transit.

Correct Answer: GLBA

The Gramm-Leach-Bliley Act (GLBA) requires U.S. financial institutions to develop security plans for protecting customer data. HIPAA governs healthcare data, GDPR protects personal data in the EU, and SOX addresses corporate governance.

Correct Answer: Quantitative Risk Analysis

Quantitative Risk Analysis uses numerical values to estimate the impact of risks, while Qualitative Risk Analysis ranks risks based on severity. Scenario Analysis evaluates risk scenarios, and Risk Mitigation reduces risks.

Correct Answer: SOX

The Sarbanes-Oxley Act (SOX) focuses on corporate financial practices and transparency. HIPAA governs healthcare data, GDPR protects personal data in the EU, and PCI DSS secures payment card data.

Correct Answer: SSL/TLS

SSL/TLS is commonly used to secure data in transit between applications. Symmetric and Asymmetric Encryption are general encryption methods, while Homomorphic Encryption is used for encrypted data processing.

Correct Answer: Risk Transference

Risk Transference involves shifting the responsibility for managing a risk to another party, such as through outsourcing or insurance. Risk Acceptance tolerates the risk, Risk Mitigation reduces it, and Risk Avoidance eliminates it.

Correct Answer: Preventing unauthorized changes to data

Data Integrity ensures that data is accurate and protected from unauthorized changes. Other options involve access control, transmission security, and encryption.

Correct Answer: Penetration Testing

Penetration Testing identifies security vulnerabilities in cloud services during development. Load Testing evaluates system performance, Compliance Testing ensures adherence to regulations, and Functional Testing verifies if the service meets requirements.

Correct Answer: Configuration Management

Configuration Management ensures systems are configured consistently and correctly. Incident Management addresses issues after they occur, Change Management handles system modifications, and Problem Management identifies root causes of issues.

Correct Answer: HIPAA

HIPAA mandates that healthcare providers secure patient data in the U.S. GLBA covers financial data, SOX focuses on corporate governance, and GDPR governs personal data protection in the EU.

Correct Answer: Asset Management

Asset Management involves identifying and documenting all assets and configurations in a cloud environment. Configuration Management ensures systems are configured correctly, Incident Management addresses issues, and Capacity Management ensures resource availability.

Correct Answer: Securing data from unauthorized access

Encryption protects data by ensuring that only authorized users can access it. Availability, identity management, and performance monitoring are handled by other controls.

Correct Answer: IaaS

IaaS (Infrastructure as a Service) gives the customer the most control over operating system and application deployment. SaaS and PaaS offer more managed services, while Public Cloud is a deployment model, not a service model.