QUESTION 49
Which phase of the cloud data life cycle involves activities such as data categorization and classification, including data labeling, marking, tagging, and assigning metadata?

QUESTION 50
Which release management term describes the process from code implementation to code review and approval to automated testing and then to production deployment?

QUESTION 51
Which setting ensures that an attacker cannot read the information stored temporarily for use by another virtual machine (VM)?

QUESTION 52
Which U.S. law requires all publicly traded corporations in the United States to provide information about their financial status and implements controls to ensure the accuracy of the disclosed information?

QUESTION 53
Which steps should an organization take to avoid risk when dealing with software licensing?

QUESTION 54
Which threat modeling process would a security analyst use to test a new application from a malicious actor’s perspective?

QUESTION 55
Which action should a customer take to add an extra layer of protection to the data stored in a public cloud environment?

QUESTION 56
An organization wants to secure the boundary between a lower-security zone and a higher-security zone.
Which security measure should it use?

QUESTION 57
Which category of cloud service provides on-demand, self-service access to basic building blocks, such as virtualized servers, block storage, and networking capacity, that can be used to create custom IT solutions?

QUESTION 58
An internal developer deploys a new customer information system at a company. The system has an updated graphical interface with new fields. Which type of functional testing ensures that the graphical interface used by employees to input customer data behaves as the employees need it to?

QUESTION 59
As part of training to help the data center engineers understand different attack vectors that affect the infrastructure, they work on a set of information about access and availability attacks that was presented. Part of the labs requires the engineers to identify different threat vectors and their names. Which threat prohibits the use of data by preventing access to it?

QUESTION 60
Which type of storage includes categories such as relational, nonrelational, key-value, and document-oriented?

QUESTION 61
Which tool should a developer use to describe the requirements they have gathered for a code improvement they are tasked with making as part of a current release?

QUESTION 62
Which cloud computing service model allows customers to run their own application code without configuring the server environment?

QUESTION 63
During a financial data investigation, the investigator is unsure how to handle a specific data set. Which set of documentation should they refer to for detailed steps on how to proceed?

QUESTION 64
In most redundant array of independent disks (RAID) configurations, data is stored across different disks.
Which method of storing data is described?

QUESTION 65
An organization’s leadership team gathered managers and key team members in each division to help create a disaster recovery plan. They realize they lack a complete understanding of the infrastructure and software needed to formulate the plan. Which action should they take to correct this issue?

QUESTION 66
A customer service representative needs to verify a customer’s private information, but the representative does not need to see all the information. Which technique should the service provider use to protect the privacy of the customer?

QUESTION 67
An organization’s security architects determined that all authentication and authorization requests need to be validated before any employee can access corporate resources. Because of this, the organization needs to implement a system that stores and manages the employees’ credential information and then validates any requests sent. Which system would allow the organization to meet the architects’ requirements?

QUESTION 68
An organization is reviewing a contract from a cloud service provider and wants to ensure that all aspects of the contract are adhered to by the cloud service provider. Which control will allow the organization to verify that the cloud provider is meeting its obligations?

QUESTION 69
Which component allows customers to transfer data into and out of a cloud computing vendor’s environment?