Q350. The European Union is often considered the world leader in regard to the privacy of personal data and has declared privacy to be a “human right.” In what year did the EU first assert this principle?

Q351. A truly airgapped machine selector will ____________.
Response:

Q352. What is the term that describes the situation when a malicious user/attacker can exit the restrictions of a single host and access other nodes on the network?
Response:

Q353. What type of masking strategy involves making a separate and distinct copy of data with masking in place?

Q354. TLS provides and ________ for ________ communications.

Q355. Which of the following is considered an external redundancy for a data center?

Q356. Although much of the attention given to data security is focused on keeping data private and only accessible by authorized individuals, of equal importance is the trustworthiness of the data.
Which concept encapsulates this?

Q357. With finite resources available within a cloud, even the largest cloud providers will at times need to determine which customers will receive additional resources first.
What is the term associated with this determination?

Q358. The cloud customer’s trust in the cloud provider can be enhanced by all of the following except:

Q359. Deviations from the baseline should be investigated and __________________.

Q360. What is the federal agency that accepts applications for new patents?

Q361. What is an often overlooked concept that is essential to protecting the confidentiality of data?

Q362. Which of the following storage types is most closely associated with a database-type storage implementation?

Q363. Along with humidity, temperature is crucial to a data center for optimal operations and protection of equipment.
Which of the following is the optimal temperature range as set by ASHRAE?

Q364. Which of the following would be a reason to undertake a BCDR test?

Q365. The Open Web Application Security Project (OWASP) Top Ten is a list of web application security threats that is composed by a member-driven OWASP committee of application development experts and published approximately every 24 months. The 2013 OWASP Top Ten list includes “cross-site scripting (XSS).” Which of the following is not a method for reducing the risk of XSS attacks?
Response:

Q366. Which ITIL component is an ongoing, iterative process of tracking all deployed and configured resources that an organization uses and depends on, whether they are hosted in a traditional data center or a cloud?

Q367. All policies within the organization should include a section that includes all of the following, except:

Q368. Which of the following would NOT be included as input into the requirements gathering for an application or system?

Q369. Your new CISO is placing increased importance and focus on regulatory compliance as your applications and systems move into cloud environments.
Which of the following would NOT be a major focus of yours as you develop a project plan to focus on regulatory compliance?

Q370. DLP can be combined with what other security technology to enhance data controls?
Response:

Q371. The BC/DR kit should include all of the following except:

Q372. ISO/IEC has established international standards for many aspects of computing and any processes or procedures related to information technology.
Which ISO/IEC standard has been established to provide a framework for handling eDiscovery processes?

Q373. A honeypot should contain _________ data.
Response:

Q374. Heating, ventilation, and air conditioning (HVAC) systems cool the data center by pushing warm air into ____________.
Response: