Matthew is reviewing a new cloud service offering that his organization plans to adopt. In this offering, a cloud provider will create virtual server instances under the multitenancy model. Each server instance will be accessible only to Matthew’s company. What cloud deployment model is being used?

Which type of business impact assessment tool is most appropriate when attempting to evaluate the impact of a failure on customer confidence?

Zeke is responsible for sanitizing a set of solid-state drives (SSDs) removed from servers in his organization’s datacenter. The drives will be reused on a different project. Which one of the following sanitization techniques would be most effective?

Robert is reviewing a system that has been assigned the EAL2 evaluation assurance level under the Common Criteria. What is the highest level of assurance that he may have about the system?

Tina would like to use a technology that will allow her to bundle up workloads and easily move them between different operating systems. What technology would best meet this need?

Jake would like to use a third-party platform to automatically move workloads between cloud service providers. What type of tool would best meet this need?

Under the cloud reference architecture, which one of the following activities is not generally part of the responsibilities of a customer?

Robert is responsible for securing systems used to process credit card information. What security control framework should guide his actions?

Seth is helping his organization move their web server cluster to a cloud provider. The goal of this move is to provide the cluster with the ability to grow and shrink based on changing demand. What characteristic of cloud computing is Seth hoping to achieve?

What type of effort attempts to bring all of an organization’s cloud activities under more centralized control?

Sherry is deploying a zero-trust network architecture for her organization. In this approach, which one of the following characteristics would be least important in validating a login attempt?

Chris is designing a cryptographic system for use within his company. The company has 1,000 employees, and they plan to use an asymmetric encryption system. They would like the system to be set up so that any pair of arbitrary users may communicate privately. How many total keys will they need?

Which one of the following hypervisor models is the most resistant to attack?

Erin is concerned about the risk that a cloud provider used by her organization will fail, so she is creating a strategy that will combine resources from multiple public cloud providers. What term best describes this strategy?

Joe is using a virtual server instance running on a public cloud provider and would like to restrict the ports on that server accessible from the internet. What security control would best allow him to meet this need?

Which one of the following would normally be considered an application capability of a cloud service provider?

Which one of the following cybersecurity threats is least likely to directly affect an object storage service?

What activity are cloud providers able to engage in because not all users will access the full capacity of their service offering simultaneously?

Vince would like to be immediately alerted whenever a user with access to a sensitive cloud service leaves a defined physical area. What type of security control should he implement?

Which one of the following characteristics is not a component of the standard definition of cloud computing?

Which one of the following sources provides a set of vendor-neutral design patterns for cloud security?

Lori is using an API to access sensitive information stored in a cloud service. What cloud secure data lifecycle activity is Lori engaged in?

Helen would like to provision a disk volume in the cloud that is mountable from a server. What cloud capability does she want?

Ben is using the sudo command to carry out operations on a Linux server. What type of access is he using?

Which one of the following cryptographic goals protects against the risks posed when a device is lost or stolen?