Recognize Risk Management Concepts Related to Cloud Services. CLO-002 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company wants to ensure that it can move its data from one cloud provider to another without losing any data or experiencing corruption. What is the most important factor to evaluate when assessing data portability?

   • AThe ability to export data in a standard, non-proprietary format.
   • BThe provider's uptime SLA.
   • CThe provider's geographic location.
   • DThe cost of the cloud provider's data egress fees.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary responsibility of an asset owner in a cloud environment?

   • ATo ensure the asset is properly secured and maintained throughout its lifecycle
   • BTo approve all cloud provider changes
   • CTo guarantee the asset never fails
   • DTo personally perform all backups of the asset
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company has a cloud environment with assets owned by different departments. The security team is responsible for overall security, but they are unsure who is responsible for patching a specific application server. This has led to delays in applying critical security patches. What is the best way to resolve this issue?

   • AHave the security team patch all servers to ensure consistency.
   • BMove all assets to a single cloud provider to simplify management.
   • CCreate a risk register to document the patching delays.
   • DAssign a specific owner for each asset and document the ownership in the asset inventory.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of maintaining an asset inventory in a cloud environment?

   • ATo automatically assign ownership to each cloud asset
   • BTo eliminate the need for risk assessments
   • CTo track all cloud assets and their configurations for management and security purposes
   • DTo replace the need for asset classification
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has a cloud application that processes payment transactions. A risk assessment identifies a high likelihood of a denial-of-service (DoS) attack that could disrupt the service. The company decides to implement a web application firewall (WAF) and rate limiting to reduce the impact of a potential attack. Which risk management strategy is the company applying?

   • ARisk avoidance
   • BRisk mitigation
   • CRisk acceptance
   • DRisk transfer
   Reveal Solution Discussion Select an answer first