- (Exam Topic 1)
What is a serious complication an organization faces from the perspective of compliance with international operations?

1. A. Different certifications
2. B. Multiple jurisdictions
3. C. Different capabilities
4. D. Different operational procedures

Correct Answer: B
When operating within a global framework, a security professional runs into a multitude of jurisdictions and requirements, and many times they might be in contention with one other or not clearly applicable. These requirements can include the location of the users and the type of data they enter into systems, the laws governing the organization that owns the application and any regulatory requirements they may have, as well as the appropriate laws and regulations for the jurisdiction housing the IT resources and where the data is actually stored, which might be multiple jurisdictions as well.

- (Exam Topic 1)
Which of the following roles is responsible for peering with other cloud services and providers?

1. A. Cloud auditor
2. B. Inter-cloud provider
3. C. Cloud service broker
4. D. Cloud service developer

Correct Answer: B
The inter-cloud provider is responsible for peering with other cloud services and providers, as well as overseeing and managing federations and federated services.

- (Exam Topic 4)
Which of the following best describes SAML?

1. A. A standard used for directory synchronization
2. B. A standard for developing secure application management logistics
3. C. A standard for exchanging usernames and passwords across devices.
4. D. A standards for exchanging authentication and authorization data between security domains.

Correct Answer: D

- (Exam Topic 1)
What is the biggest benefit to leasing space in a data center versus building or maintain your own?

1. A. Certification
2. B. Costs
3. C. Regulation
4. D. Control

Correct Answer: B
When leasing space in a data center, an organization can avoid the enormous startup and building costs associated with a data center, and can instead leverage economies of scale by grouping with other organizations and sharing costs.

- (Exam Topic 2)
What does the "SOC" acronym refer to with audit reports?

1. A. Service Origin Confidentiality
2. B. System Organization Confidentiality
3. C. Service Organizational Control
4. D. System Organization Control

Correct Answer: C