- (Exam Topic 8)
The configuration management and control task of the certification and accreditation process is incorporated in which phase of the System Development Life Cycle (SDLC)?

1. A. System acquisition and development
2. B. System operations and maintenance
3. C. System initiation
4. D. System implementation

Correct Answer: A
Reference https://online.concordiA.edu/computer-science/system-development-life-cycle-phases/

- (Exam Topic 13)
Which of the following is BEST achieved through the use of eXtensible Access Markup Language (XACML)?

1. A. Minimize malicious attacks from third parties
2. B. Manage resource privileges
3. C. Share digital identities in hybrid cloud
4. D. Defined a standard protocol

Correct Answer: B

- (Exam Topic 15)
Which of the following is the BEST approach to implement multiple servers on a virtual system?

1. A. Implement multiple functions per virtual server and apply the same security configuration for each virtual server.
2. B. Implement one primary function per virtual server and apply high security configuration on the host operating system.
3. C. Implement one primary function per virtual server and apply individual security configuration for each virtual server.
4. D. Implement multiple functions within the same virtual server and apply individual security configurations to each function.

Correct Answer: C

- (Exam Topic 15)
A cloud hosting provider would like to provide a Service Organization Control (SOC) report relevant to its security program. This report should an abbreviated report that can be freely distributed. Which type of report BEST meets this requirement?

1. A. SOC 1
2. B. SOC 2 Type I
3. C. SOC 2 Type II
4. D. SOC 3

Correct Answer: D

- (Exam Topic 9)
Which Hyper Text Markup Language 5 (HTML5) option presents a security challenge for network data leakage prevention and/or monitoring?

1. A. Cross Origin Resource Sharing (CORS)
2. B. WebSockets
3. C. Document Object Model (DOM) trees
4. D. Web Interface Definition Language (IDL)

Correct Answer: B