QUESTION 1

1. Most distributed denial of service protections are cloud based.
2. True
3. False

1 points

QUESTION 2

1. Changes made by an administrator will be lost during auto-scale activity.
2. True
3. False

1 points

QUESTION 3

1. Web Application Firewalls can redirect traffic to a service that filters traffic before it passes to a destination web application.
2. True
3. False

1 points

QUESTION 4

1. Embedded credentials is a growing problem that should be discovered during static application security testing.
2. True
3. False

1 points

QUESTION 5

1. SecaaS providers should be held to a higher standard than other service providers when managing multitenantisolation and segregation.
2. True
3. False

1 points

QUESTION 6

1. Encrypting all data in SaaS environments is recommended.
2. True
3. False

1 points

QUESTION 7

1. Cloud providers should back up data to local storage rather than the cloud.
2. True
3. False

1 points

QUESTION 8

1. Changing SecaaS providers could lead to loss of historical data.
2. True
3. False

1 points

QUESTION 9

1. This process substitutes data with a random value and then stores the original value and the randomized value for later retrieval:

1 points

QUESTION 10

1. Most cloud provider APIsuse Transport Layer Security by default.
2. True
3. False

1 points

QUESTION 11

1. Protects data by applying a mathematical algorithm which scrambles and then unscrambles data:

1 points

QUESTION 12

1. SecaaS may not be able to assure compliance with regulations in all jurisdictions in which an organization operates.
2. True
3. False

1 points

QUESTION 13

1. Refers to products thatmonitoractivities,enforcepolicies, and detects potential security breaches:
2. management planes
3. Cloud Access and Security Brokers
4. hypervisors
5. encryption

1 points

QUESTION 14

1. If an application directly accesses the management plane,then access by that applicationshould be scoped to the least privileges possible.
2. True
3. False

1 points

QUESTION 15

1. Remote logins do not need to be disabled in immutable servers.
2. True
3. False

1 points

QUESTION 16

1. Automated security testing is frequently performed outside developer control.
2. True
3. False

1 points

QUESTION 17

1. Implementing SecaaSasoffered by a cloud provider is often more secure and cost less than when a company builds their own security.
2. True
3. False

1 points

QUESTION 18

1. Web Application Firewalls when positioned between the attacker and the customers system can absorb attacks before they ever reach the customer.
2. True
3. False

1 points

QUESTION 19

1. Technique used to display only the last four digits of a sixteen-digit credit card number.

1 points

QUESTION 20

1. _______ is atool for documenting which users,groups,and roles should access which resources and functions.