stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CLD Cloud Security (Hard) Flashcards | StudBud
Explore
/
CLD Cloud Security (Hard)
CLD Cloud Security (Hard)
26 terms
·
StudBud Administration
·
33 plays
Imported from external platform
Flashcards
26 cards
F
Practice quiz
P
Host live
L
Questions
26
Answers
1
Solution where data is stored remotely at a service provider instead of storing it locally
Online backup
Tape drive
Cloud backup
LibreOffice
2
A specific entity created and sent data to a specific recipient and it was received
DLP
PKI
Nonrepudiation
Bit splitting
3
Mathematical code that allows data encryption and decryption
PKI
Key
Masking
Public/Private
4
Term for destroying the encryption keys used to encrypt data
Poor key management
Obfuscation
PKI
Crypto-shredding
5
Best way to dispose of electonic records in the cloud?
Encryption
Physical destruction
Overwriting data
Degaussing
6
Analysis of source code and binaries for conditions indicative of security issues
OWASP
Dynamic application security testing
Static application security testing
Secure coding
7
Storage types associated with platform as a service (PaaS)
Raw and block
SaaS application
Databases and big data
Tabular
8
Which is *NOT* an IaaS benefit to the customer
Transfer of ownership cost
Power and cooling efficiencies
Software licensing
Metered services
9
Device to store and manage encryption keys
Private key
Hardware security module (HSM)
Public key
Trusted operating system module (TOS)
10
Describes a managed service model where software is hosted by a service provider over a network
Infrastructure as a Service (IaaS)
Private cloud
Public cloud
Software as a Service (SaaS)
11
With transparent encryption of a database, the encryption is applied
Within the database application
On the data storage volume
Within a key management system
In the application using the database
12
Company purchases hosting services from a cloud provider to resell to its own customers is:
Cloud broker
Value added reseller
Cloud programmer
Cloud proxy
13
Takes advantage of information developed in a business impact analysis
Securing asset acquisitions
Risk analysis
Calculating TCO (total cost of ownership)
Calculating ROI (return on investment)
14
Risk assessment using methods, principles, or rules to assess the non-numerical
Quantitative
Qualitative
Alphabetical
Hybrid
15
S.T.R.I.D.E. threat model consists of
Spoofing, Tampering, Repudiation, Info Disc, DDoS, Elev of Privilege
Spoofing, Tampering, Refutation, Info Disc, DoS, Elasticity
Spoofing, Tampering, Non-Repudiation, Info Disc, DoS, Elev Privilege
Spoofing, Tampering, Repudiation, Info Disc, DoS, Elev of Privilege
16
Cloud deployment models
Public, Private, Hybrid, Community
Public, Private, Joint, Community
Public, Internet, Hybrid, Community
External, Private, Hybrid, Community
17
Cloud for open use by the general public, owned, operated, and managed by a cloud provider
Private cloud
Hybrid cloud
Public cloud
Personal cloud
18
Software technology which abstracts applications from the underlying operating system
SaaS
Distributed Execution
Partition
Application Virtualization
19
Which is *NOT* an attack on a network?
Denial of Service
Syn flood
Brute force
Nmap scan
20
A common copy protection concept is
Information rights management
Masking
Degaussing
Hashing
21
When building a new datacenter, what is most important?
Utility infrastructure
Airline flight path
Location relative to competitors
Law enforcement response time
22
Federal law in the US to control how financial institutions deal with PII
PCI
ISO/IEC
Gramm-Leach-Bliley Act (GLBA)
Consumer Protection Act
23
Term for replacement sensitive data with different unique identifiers
Elasticity
Obfuscation
Randomization
Tokenization
24
US regulation to protect shareholders from accounting errors and fraud
HIPPA
PCI
Sarbanes-Oxley Act (SOX)
Gramm-Leach-Bliley Act (GLBA)
25
When conflict between parties occurs, how is jurisdiction determined?
Common law
Contract
Criminal law
Tort law
26
With federation, who is the relying party (RP), and what do they do?
RP is the service provider, they consome tokens from the customer
RP is the identity provider, they consume tokens from the service provider
RP is the customer, they consume tokens from the identity provider
RP is the service provider, they consume tokens from the identity provider