NO.440 The REST API is a widely used standard for communications of web-based services between clients and the servers hosting them.
Which protocol does the REST API depend on?

NO.441 What type of PII is regulated based on the type of application or per the conditions of the specific hosting agreement?

NO.442 Whereas a contract articulates overall priorities and requirements for a business relationship, which artifact enumerates specific compliance requirements, metrics, and response times?

NO.443 What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?

NO.444 When designing a cloud data center, which of the following aspects is not necessary to ensure continuity of operations during contingency operations?

NO.445 Which United States law is focused on accounting and financial practices of organizations?

NO.446 Software-defined networking (SDN) is intended to separate different network capabilities and allow for the granting of granular configurations, permissions, and features to non- network staff or customers. Which network capability is separated from forwarding of traffic?
Response:

NO.447 During which phase of the cloud data lifecycle is it possible for the classification of data to change?

NO.448 Along with humidity, temperature is crucial to a data center for optimal operations and protection of equipment.
Which of the following is the optimal temperature range as set by ASHRAE?

NO.449 In which cloud service model is the customer required to maintain the OS?

NO.450 The Open Web Application Security Project (OWASP) Top Ten is a list of web application security threats that is composed by a member-driven OWASP committee of application development experts and published approximately every 24 months. The 2013 OWASP Top Ten list includes “unvalidated redirects and forwards.” Which of the following is a good way to protect against this problem?
Response:

NO.451 What concept does the “A” represent in the DREAD model?

NO.452 What concept does the “R” represent with the DREAD model?

NO.453 You are the security policy lead for your organization, which is considering migrating from your on- premises, legacy environment into the cloud. You are reviewing the Cloud Security Alliance Cloud Controls Matrix (CSA CCM) as a tool for your organization. What is probably the best benefit offered by the CCM?

NO.454 Which of the following technologies is used to monitor network traffic and notify if any potential threats or attacks are noticed?

NO.455 When an API is being leveraged, it will encapsulate its data for transmission back to the requesting party or service.
What is the data encapsulation used with the SOAP protocol referred to as?

NO.456 Many tools and technologies are available for securing or monitoring data in transit within a data center, whether it is a traditional data center or a cloud.
Which of the following is NOT a technology for securing data in transit?

NO.457 What is a cloud storage architecture that manages the data in caches of copied content close to locations of high demand?
Response:

NO.458 Which of the following is the concept of segregating information or processes, within the same system or application, for security reasons?

NO.459 What is the only data format permitted with the SOAP API?

NO.460 Which of the following best describes a cloud carrier?

NO.461 Before deploying a specific brand of virtualization toolset, it is important to configure it according to ____________.

NO.462 Penetration testing is a(n) __________ form of security assessment.

NO.463 Which of the following roles would be responsible for managing memberships in federations and the use and integration of federated services?

NO.464 Just like the risk management process, the BCDR planning process has a defined sequence of steps and processes to follow to ensure the production of a comprehensive and successful plan.
Which of the following is the correct sequence of steps for a BCDR plan?