Question 1

Management planes deployed in cloud environments may pose a risk of potentially allowing access to the entire environment. Which of the following controls is MOST appropriate for mitigating this risk?

Options :

A : Regular audits

B : Increased monitoring

C : Change management

D : Access restriction

Answer: D

Question 2

Which of the following is an example of availability technical impact?

Options :

A : A distributed denial of service (DDoS) attack renders the customer-s cloud inaccessible for 24 hours.

B : The cloud provider reports a breach of customer personal data from an unsecured server.

C : An administrator inadvertently clicked on phish bait, exposing the company to a ransomware attack.

D : A hacker using a stolen administrator identity alters the discount percentage in the product database

Answer: A

Question 3

A cloud customer is involved in an acquisition that was done to consolidate different cloud services into a single relationship with a single cloud service provider. As a result, which type of termination is triggered by the cloud customer?

Options :

A : Termination for acquisition

B : Termination for convenience

C : Termination for cause

D : Termination at the end of the term

Answer: B

Question 4

During the course of a web application review, a cloud auditor identified minor weakness in a relevant database that is out of scope for the audit. Which of the following is the BEST course of action?

Options :

A : Include review of database controls in the scope.

B : Report the weakness as observed

C : Document for future review

D : Work with database administrators to rectify the issue.

Answer: B

Question 5

When an organization is moving to the cloud, responsibilities are shared based upon the cloud service provider's model and accountability is:

Options :

A : shared

B : avoided.

C : transferred.

D : maintained.

Answer: D