- (Exam Topic 3)
During which phase of the cloud data lifecycle is it possible for the classification of data to change?
Correct Answer:
C
The create phase encompasses any time data is created, imported, or modified. With any change in the content or value of data, the classification may also change. It must be continually reevaluated to ensure proper security. During the use, share, and archive phases, the data is not modified in any way, so the original classification is still relevant.
- (Exam Topic 4)
Data labels could include all the following, except:
Correct Answer:
B
All the others might be included in data labels, but multifactor authentication is a procedure used for access control, not a label.
- (Exam Topic 2)
Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?
Correct Answer:
D
Regardless of which cloud-hosting model is used, the cloud customer always has sole responsibility for the data and its security.
- (Exam Topic 2)
From a security perspective, which of the following is a major concern when evaluating possible BCDR solutions?
Correct Answer:
C
When a security professional is considering cloud solutions for BCDR, a top concern is the jurisdiction where the cloud systems are hosted. If the jurisdiction is different from where the production systems are hosted, they may be subjected to different regulations and controls, which would make a seamless BCDR solution far more difficult.
- (Exam Topic 1)
Which of the following roles is responsible for obtaining new customers and securing contracts and agreements?
Correct Answer:
B
The cloud service broker is responsible for obtaining new customers, analyzing the marketplace, and securing contracts and agreements.