- (Exam Topic 2)
Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?
Correct Answer:
D
Regardless of which cloud-hosting model is used, the cloud customer always has sole responsibility for the data and its security.
- (Exam Topic 4)
Which is the lowest level of the CSA STAR program?
Correct Answer:
B
The lowest level is Level 1, which is self-assessment, Level 2 is an external third-party attestation, and Level 3 is a continuous-monitoring program. Hybridization does not exist as part of the CSA STAR program.
- (Exam Topic 1)
Which of the following actions will NOT make data part of the "create" phase of the cloud data lifecycle?
Correct Answer:
A
Although the initial phase is called "create," it can also refer to modification. In essence, any time data is considered "new," it is in the create phase. This can come from data that is newly created, data that is imported into a system and is new to that system, or data that is already present and modified into a new form or value. Modifying the metadata does not change the actual data.
- (Exam Topic 3)
Although the REST API supports a wide variety of data formats for communications and exchange, which data formats are the most commonly used?
Correct Answer:
C
JavaScript Object Notation (JSON) and Extensible Markup Language (XML) are the most commonly used data formats for the Representational State Transfer (REST) API and are typically implemented with caching for increased scalability and performance. Extensible Markup Language (XML) and Security Assertion Markup Language (SAML) are both standards for exchanging encoded data between two parties, with XML being for more general use and SAML focused on authentication and authorization data. HTML is used for authoring web pages for consumption by web browsers
- (Exam Topic 4)
Which of the following terms is not associated with cloud forensics?
Correct Answer:
D
Plausibility, here, is a distractor and not specifically relevant to cloud forensics.