D320 Managing Cloud Security - Set 2 - Part 3

Correct Answer: Data Breach Notification

GDPR requires organizations to notify individuals in the event of a data breach that affects their personal data. Purpose Limitation and Data Minimization are principles for data use and collection, while Integrity and Confidentiality protect data.

Correct Answer: Sandbox

A Sandbox is an isolated environment used for testing and development to prevent potential security issues from affecting production systems. Encryption protects data, MFA strengthens access control, and VPN secures network communications.

Correct Answer: Security Information and Event Management

SIEM involves continuous monitoring and analysis of security events to detect and respond to incidents. Incident Management addresses immediate issues, Disaster Recovery focuses on restoring services after a disruption, and Configuration Management ensures systems are configured correctly.

Correct Answer: Scenario Analysis

Scenario Analysis evaluates how specific risks could impact business operations by considering different risk scenarios. BIA assesses the impact on business functions, Risk Mitigation reduces risks, and Risk Transference shifts risks to another party.

Correct Answer: Health Insurance Portability and Accountability Act

HIPAA requires organizations to implement security controls to protect electronic health records (EHRs). GLBA and SOX address financial information, and GDPR focuses on personal data protection in the EU.

Correct Answer: Network Access Control

NAC ensures that only authorized devices can connect to a network by enforcing security policies at the point of entry. VPN secures remote access, WAF protects web applications, and IDS detects unauthorized access, but NAC specifically controls device access.

Correct Answer: Capacity Management

Capacity Management involves regularly reviewing and adjusting cloud resources to ensure they are used efficiently and meet demand. Change Management controls modifications, Incident Management addresses issues, and Service Level Management ensures service agreements are met.

Correct Answer: Risk Acceptance

Risk Acceptance occurs when an organization chooses to take no action to mitigate or transfer a risk, instead accepting the potential consequences. Risk Avoidance eliminates the risk, Risk Mitigation reduces it, and Risk Transference shifts it to another party.

Correct Answer: Health Insurance Portability and Accountability Act

HIPAA is designed to protect the privacy and security of health information in the U.S. SOX focuses on corporate financial practices, GDPR on personal data protection in the EU, and PCI DSS on payment card security.

Correct Answer: Sandbox

A Sandbox is an isolated environment used for testing and development to prevent potential security issues from affecting production systems. Encryption protects data, MFA strengthens access control, and VPN secures network communications.