D320 Managing Cloud Security - Set 5 - Part 2

Correct Answer: Disaster Recovery

Disaster Recovery focuses on restoring cloud services after a disruption. Incident Management addresses immediate issues, while Capacity and Problem Management ensure resource optimization and root cause identification.

Correct Answer: Collect only necessary personal data

Data Minimization requires organizations to collect only the data necessary for specific purposes. Encryption, integrity, and breach notification are covered by other GDPR principles.

Correct Answer: Change Management

Change Management involves documenting, approving, and tracking changes to cloud infrastructure. Incident and Problem Management address specific issues, while Capacity Management optimizes resource use.

Correct Answer: Homomorphic Encryption

Homomorphic Encryption allows data to be processed without being decrypted, maintaining its security during use. SSL/TLS, Symmetric Encryption, and Disk Encryption secure data in other contexts.

Correct Answer: Preventing unauthorized network traffic

Firewalls prevent unauthorized network traffic from entering or leaving a cloud environment. Other tools handle encryption, identity management, and incident detection.

Correct Answer: Ensuring security, availability, and privacy controls

SOC 2 reports audit the security, availability, confidentiality, and privacy of cloud services. SOC 1 focuses on financial controls, and healthcare regulations fall under HIPAA.

Correct Answer: Quantitative Risk Assessment

Quantitative Risk Assessment uses numerical estimates to evaluate risks. Qualitative Risk Assessment uses subjective descriptions, and Scenario and Business Impact Analyses assess potential impacts.

Correct Answer: Obscuring sensitive data to protect privacy

Data Masking obscures sensitive data, protecting privacy while maintaining functionality. Other tools handle encryption, transmission, and identity management.

Correct Answer: Risk Transference

Risk Transference involves shifting the financial consequences of a risk, such as by purchasing insurance, to another party.

Correct Answer: API Gateway

An API Gateway secures APIs by managing and enforcing access controls, protecting against unauthorized access. SSL/TLS secures data transmission, firewalls control network traffic, and MFA secures user authentication.

Correct Answer: Detecting and alerting administrators to unauthorized access attempts

IDS detects and alerts administrators to unauthorized access attempts. It does not directly prevent access or manage identities.

Correct Answer: Capacity Management

Capacity Management ensures that cloud resources are used efficiently to meet current and future demand.

Correct Answer: GDPR

The GDPR requires organizations to notify individuals if their personal data is breached.

Correct Answer: Isolating environments for testing and development

A sandbox is an isolated environment used for testing and development, protecting the production environment from security issues.

Correct Answer: Multi-Factor Authentication (MFA)

MFA provides strong protection against unauthorized access by requiring multiple forms of verification.

Correct Answer: Disaster Recovery

Disaster Recovery focuses on restoring services after a disruption, ensuring business continuity.

Correct Answer: Object-Based Storage

Object-Based Storage is ideal for large unstructured data and includes metadata for better data management.

Correct Answer: Monitoring security events and incidents

SIEM continuously monitors and analyzes security events to detect and respond to incidents.

Correct Answer: SSL/TLS

SSL/TLS is commonly used to secure data during transmission between users and cloud services.

Correct Answer: Documenting all identified risks, including their potential impact and mitigation strategies

A Risk Register records all identified risks, their severity, potential impact, and the strategies for managing them.