Cloud Security (Hard)

Device to store and manage encryption keys

When conflict between parties occurs, how is jurisdiction determined?

A specific entity created and sent data to a specific recipient and it was received

US regulation to protect shareholders from accounting errors and fraud

Which is *NOT* an attack on a network?

Software technology which abstracts applications from the underlying operating system

Company purchases hosting services from a cloud provider to resell to its own customers is:

A common copy protection concept is

Best way to dispose of electonic records in the cloud?

Solution where data is stored remotely at a service provider instead of storing it locally

Risk assessment using methods, principles, or rules to assess the non-numerical

S.T.R.I.D.E. threat model consists of

Term for replacement sensitive data with different unique identifiers

When building a new datacenter, what is most important?

Mathematical code that allows data encryption and decryption

Describes a managed service model where software is hosted by a service provider over a network

Cloud deployment models

With transparent encryption of a database, the encryption is applied

Storage types associated with platform as a service (PaaS)

Takes advantage of information developed in a business impact analysis

Analysis of source code and binaries for conditions indicative of security issues

Term for destroying the encryption keys used to encrypt data

Cloud for open use by the general public, owned, operated, and managed by a cloud provider

Federal law in the US to control how financial institutions deal with PII

With federation, who is the relying party (RP), and what do they do?

Which is *NOT* an IaaS benefit to the customer