Managing-Cloud-Security 試験問題を無料オンラインアクセス

An organization is considering using vendor-specific application programming interfaces (APIs) and internal tools to set up a new service. However, the engineers are against this plan and are advocating for a new policy to prevent issues that could arise. Which common concern in cloud applications are the engineers concerned about?

• A.Reliability
• B.Availability
• C.Scalability
• D.Portability

An organization is considering a cloud provider that has multivendor pathway connectivity. What does this feature provide?

• A.Contracts with fuel providers
• B.Connections to several electric providers that are not on the same grid
• C.Contracts with heating, ventilation, and air conditioning (HVAC) providers
• D.Connections to several internet service providers

Which regulation defines requirements for the electronic transfer of healthcare data to a cloud service provider?

• A.Health Insurance Portability and Accountability Act
• B.Stark Law
• C.Gramm-Leach-Bliley Act
• D.Healthcare Quality Improvement Law

Which item should be used by a consumer to determine whether a cloud service provider is in regulatory or legal compliance?

• A.Warrant
• B.Third-party attestation
• C.Existing contract
• D.Regulatory obligations

An organization is undergoing an ISO 27001 audit that includes a software as a service (SaaS) solution within scope, and the auditor has requested evidence of controls. What evidence should the organization provide the auditor?

• A.Operating system patch logs
• B.Network firewall rules
• C.Physical diagram of the data center
• D.Provider compliance attestation