- (Exam Topic 3)
Which cloud storage type resembles a virtual hard drive and can be utilized in the same manner and with the same type of features and capabilities?

1. A. Volume
2. B. Unstructured
3. C. Structured
4. D. Object

Correct Answer: A
Volume storage is allocated and mounted as a virtual hard drive within IaaS implementations, and it can be maintained and used the same way a traditional file system can. Object storage uses a flat structure on remote services that is accessed via opaque descriptors, structured storage resembles database storage, and unstructured storage is used to hold auxiliary files in conjunction with applications hosted within a PaaS implementation.

- (Exam Topic 4)
Which of the following best describes a cloud carrier?

1. A. The intermediary who provides connectivity and transport of cloud providers and cloud consumers
2. B. A person or entity responsible for making a cloud service available to consumers
3. C. The person or entity responsible for transporting data across the Internet
4. D. The person or entity responsible for keeping cloud services running for customers

Correct Answer: A
A cloud carrier is the intermediary who provides connectivity and transport of cloud services between cloud providers and cloud customers.

- (Exam Topic 2)
Which OSI layer does IPsec operate at?

1. A. Network
2. B. transport
3. C. Application
4. D. Presentation

Correct Answer: A
A major difference between IPsec and other protocols such as TLS is that IPsec operates at the Internet network layer rather than the application layer, allowing for complete end-to-end encryption of all communications and traffic.

- (Exam Topic 4)
What concept does the A represent within the DREAD model?

1. A. Affected users
2. B. Authorization
3. C. Authentication
4. D. Affinity

Correct Answer: A
The concept of affected users measures the percentage of users who would be impacted by a successful exploit. Scoring ranges from 0, which would impact no users, to 10, which would impact all users. None of the other options provided is the correct term.

- (Exam Topic 4)
Which of the following best describes the Organizational Normative Framework (ONF)?

1. A. A set of application security, and best practices, catalogued and leveraged by the organization
2. B. A container for components of an application’s security, best practices catalogued and leveraged by the organization
3. C. A framework of containers for some of the components of application security, best practices, catalogued and leveraged by the organization
4. D. A framework of containers for all components of application security, best practices, catalogued and leveraged by the organization.

Correct Answer: D
Option B is incorrect, because it refers to a specific applications security elements, meaning it is about an ANF, not the ONF. C is true, but not as complete as D, making D the better choice. C suggests that the framework contains only “some” of the components, which is why B (which describes “all” components) is better