Correct answer:

Define scope, gather requirements, assess risk, implement is correct. The order of the steps for a BCDR process is as follows: define scope, gather requirements, analyze, assess risk, implement, test, report, and revise.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Type 1 hypervisor is correct. Being tied to the underlying hardware and hosting virtual machines on top of it, a Type 1 hypervisor operates as the sole layer between the hardware (bare metal) and host (virtual servers) layer.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Application is correct. Infrastructure as a Service pools the compute resources for platforms and applications to build upon, including CPU, memory, and storage. Applications are not part of an IaaS offering from the cloud provider.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Deletion is correct. Deletion merely removes the pointers to data on a system; it does nothing to actually remove and sanitize the data. As such, the data remains in a recoverable state, and more secure methods are needed to ensure it has been destroyed and is not recoverable by another party.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Generally Accepted Privacy Principles is correct. GAPP stands for Generally Accepted Privacy Principles, which is a privacy standard.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Authentication is correct. Authentication is the process of proving whether the identity presented by a user is true and valid. This can be done through common mechanisms such as user ID and password combinations or with more secure methods such as multifactor authentication.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Operating system of the host is correct. Once a storage LUN (logical unit number) is allocated to a virtual machine, the operating system of that virtual machine will format, manage, and control the file system and security of the data on that LUN.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Auditability is correct. Auditing involves reports and evidence that show user activity, compliance with controls and regulations, the systems and processes that run and what they do, as well as information and data access and modification records. A cloud environment adds additional complexity to traditional audits because the cloud customer will not have the same level of access to systems and data as they would in a traditional data center.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Volume and object is correct. Volume and object are the two storage types associated with IaaS.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Confidentiality is correct. The main goal of confidentiality is to ensure that sensitive information is not made available or leaked to parties that should not have access to it, while at the same time ensuring that those with appropriate need and authorization to access it can do so in a manner commensurate with their needs and confidentiality requirements.

Incorrect answers:

All other answers choices are incorrect.