Question 1

A government agency is planning a hybrid cloud deployment. Strict controls must be in place that can label classified data. The solution must ensure that access rights will be granted based on the user's government security classification. Which type of access control should be used?

Options :

A : Mandatory access control (MAC)

B : Attribute-based access control (ABAC)

C : Discretionary access control (DAC)

D : Role-based access control (RBAC)

Answer: A

Question 2

A company may choose to use CDs, DVDs, hard drives, or even cloud storage for data backup. Which aspect of data backup does this statement describe?

Options :

A : Data mirroring

B : Incremental backups

C : Image backups

D : Backup media

Answer: D

Question 3

What allows a user to query information from an online database with a web application without revealing what they are viewing?

Options :

A : Private Information Retrieval (PIR)

B : Homomorphic encryption

C : Secure Function Evaluation (SFE)

D : Private Function Evaluation (PFE)

Answer: A

Question 4

An IT organization recently implemented a hybrid cloud deployment. The security team must be able to correlate event data combined from different sources in a central location.

Options :

A : Intrusion Detection System (IDS)

B : File Integrity Monitoring (FIM)

C : Security Information and Event Management (SIEM)

D : Data Loss Prevention (DLP)

Answer: C

Question 5

A healthcare organization would like to work with another healthcare organization without needing to maintain identified accounts for members of the other organization. Which technology concept should the company use?

Options :

A : Cloud identity provider

B : Single sign-on (SSO)

C : Multi-factor authentication (MFA)

D : Federated authentication

Answer: D