SEC+ 601 CLOUD DAY 3 DEC

Why should we never use PAP authentication?

What type of SSO mechanism would be MOST secure, when authenticating internal enterprise users?

What is it when we analyse log files to track risky user behaviours?

This is where an application is placed in its own VM for patching & testing, or because it is a dangerous application?

If a organization employs eight contractors for two months of mail server migration, how should I set up their accounts?

How should we implement SSO authentication to 3rd party websites without users' passwords?

What will my file integrity monitoring use to validate files have not been tampered with?

A security layer that operates as a gatekeeper between an organization’s on-premise network and the provider’s cloud?

What will I need to perform to ensure FBI investigators cannot access deleted files?

What runs directly on the host’s hardware to control the hardware and to manage guest operating system in a datacenter?

Where does the government store my private keys, in case my Dog destroys my CAC card?

What does Microsoft provide when the administrator receives regular updates on risky user behaviours?

What Cloud Service would we use when users access software applications?

If a customers wants to host services in the cloud at the most competitive costs, what cloud model would they choose?

I login to my bank and check the balance, later when using a U.S.A. VPN connection. A login to my bank is refused, Why?

The finance team are using facial recognition on their laptops, what could be used to provide 2FA?

What may block physical access to the datacenter due to a high FRR metric?

What is it when customers "workloads" are separated from each other on a single hypervisor host?

What is it when copies of enterprise data are replicated across multiple regional sites by my cloud provider?

What allows for application workloads to be isolated as a single unit containing application binaries and library's?

This is like taking a picture with a camera—whatever the virtual machine's setting is at that time, is what you capture?

What cloud based As a Service is used by my development team?

A SCADA network must meet the following government regulations not accessible by corporate networks or the Internet?

When choosing a cloud solution for your government department, Data stored will include PII what would be most secure?

Where an attacker attacks either the host machine that holds all of the VMs (the hypervisor), or any of the other VMs?

The attacker “breaks out” of a VM’s normally isolated state and interacts directly with the hypervisor?

What will Microsoft provide so customers can connect into a public cloud and have exclusive access to a private network?

A brute-force attack cracks a password using all combinations of characters . What can I do to prevent this attack?

Which of the following algorithms is best for bulk encryption?

What Cloud Service Model would be appropriate for Managing Critical Infrastructure services (Power Grid)?