Q33. Why is a service type of network typically isolated on different hardware?

Q34. Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

Q35. The amount of risk that the leadership and stakeholders of an organization are willing to accept is know as:

Q36. ENISA: A reason for risk concerns of a cloud provider being acquired is:

Q37. Which of the following reports the cloud service provide normally share with customer WITHOUT any non-disclosure agreement and is in the public domain?

Q38. Which is the key technology that enables the sharing of resources and makes cloud computing most viable in terms of cost savings?

Q39. What can be implemented to help with account granularity and limit
blast radius with laaS an PaaS?

Q40. CCM: A hypothetical start-up company called “ABC” provides a cloud based IT management solution. They are growing rapidly and therefore need to put controls in place in order to manage any changes in
their production environment. Which of the following Change Control & Configuration Management production environment specific control should they implement in this scenario?

Q41. CCM: A hypothetical company called: “Health4Sure” is located in the United States and provides cloud based services for tracking patient health. The company is compliant with HIPAA/HITECH Act among other industry standards. Health4Sure decides to assess the overall security of their cloud service against the CCM toolkit so that they will be able to present this document to potential clients.
Which of the following approach would be most suitable to assess the overall security posture of Health4Sure’s cloud service?

Q42. Which of the following is NOT a characteristic of Object Storage?

Q43. Which of the following is an effective way of segregating different cloud networks and datacenters in a hybrid cloud environment?

Q44. In a cloud environment, “unclear roles& responsibilities” and “no control over vulnerability process” on part of cloud customer can lead to:

Q45. A security failure at the root network of a cloud provider will not compromise the security of all customers because of multitenancy configuration.

Q46. In the cloud provider and consumer relationship, which entity
manages the virtual or abstracted infrastructure?

Q47. When virtual machines may communicate with each other over a hardware backplane, Rather than a network, It gives rise to:

Q48. Which is the most important trust mechanism between cloud service provider and cloud customer?

Q49. Which one of the following is NOT one of phases for cloud auditing?

Q50. CCM: The following list of controls belong to which domain of the CCM?
GRM 06 – Policy GRM 07 – Policy Enforcement GRM 08 – Policy Impact on Risk Assessments GRM 09 – Policy Reviews GRM 10 – Risk Assessments GRM 11 – Risk Management Framework

Q51. In volume storage, what method is often used to support resiliency and security?