Correct answer:

Cloud service operations manager is correct. The cloud service operations manager is responsible for preparing systems for the cloud, administering and monitoring services, providing audit data as requested or required, and managing inventory and assets.

Incorrect answers:

All other answers choices are incorrect.

Correct answer;

Unvalidated redirects and forwards is correct. Many web applications offer redirect or forward pages that send users to different, external sites. If these pages are not properly secured and validated, attackers can use the application to forward users to sites for phishing or malware attempts. These attempts can often be more successful than direct phishing attempts because users trust the site or application that sent them there and assume it has been properly validated and approved by the trusted application’s owners or operators.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Homomorphic is correct. Although still in the early stages of development, homomorphic encryption aims to allow the manipulation of data without the need to decrypt it first.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Their home organization is correct. Within a federated identity system, a user performs authentication with their home organization, and the application accepts the authentication tokens and user information from the identity provider in order to grant access.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Zero is correct. DNSSEC does not require any additional DNS queries to be performed. The DNSSEC integrity checks and validations are all performed as part of the single DNS lookup resolution.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Reservations is correct. Reservations ensure that a minimum level of resources will always be available to a cloud customer for them to start and operate their services. In the event of a DoS attack against one customer, reservations can guarantee that the other customers will still be able to operate.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Software-define networking is correct. Software-defined networking separates the administration of network filtering and network forwarding to allow for distributed administration.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Print is correct. IRM allows an organization to control who can print a set of information. This is not possible under traditional file system controls, where if a user can read a file, they are able to print it as well.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

GLBA is correct. The GLBA, as it is commonly called based on the lead sponsors and authors of the act, is officially known as “The Financial Modernization Act of 1999.” It is specifically focused on PII as it relates to financial institutions. There are three specific components of it, covering various areas and use, on top of a general requirement that all financial institutions must provide all users and customers with a written copy of their privacy policies and practices, including with whom and for what reasons their information may be shared with other entities.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Operating system is correct. With IaaS, the operating system logs are directly accessible by and available to the cloud customer without the need for intervention by the cloud provider.

Incorrect answers:

All other answers choices are incorrect.