Correct answer:

Data at rest is correct. Data at rest refers to information stored on a system or device versus data that is actively being transmitted across a network or between systems. The data can be stored in many different forms to fit within this category. Some examples include databases, file sets, spreadsheets, documents, tapes, archives, and even mobile devices.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

SAML is correct. The WS-Security specifications, as well as the WS-Federation system, are built on XML, WDSL, and SOAP, but not SAML.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Data breach is correct. A data breach is the unauthorized exposure of sensitive and private data to a party that is not entitled to have it.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Define scope is correct. Security should be included in discussions from the very first phase when defining the scope. Adding security later is likely to incur additional costs in time and money, or it will result in an incomplete or inadequate plan.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

40–60 percent relative humidity is correct. The guidelines from ASHRAE establish 40–60 percent relative humidity as optimal for a data center.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Users is correct. An SLA requires performance monitoring of CPU, memory, storage, and networking. The number of users active on a system would not be part of an SLA specifically, other than in regard to the impact on the other four variables.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

User logins is correct. A host-based intrusion detection system (HIDS) monitors network traffic as well as critical system files and configurations.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Correlation is correct. Because a SIEM solution aggregates logs together from across the enterprise, it enables a user to search for and discover similar events, even if they are on different applications or devices.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Insecure direct object references is correct. An insecure direct object reference occurs when a developer has in their code a reference to something on the application side, such as a database key, the directory structure of the application, configuration information about the hosting system, or any other information that pertains to the workings of the application that should not be exposed to users or the network.

Incorrect answers:

All other answers choices are incorrect.

Correct answer:

Control is correct. When leasing space in a data center, an organization will give up a large degree of control as to how it is built and maintained and instead must conform to the policies and procedures of the owners and operators of the data center.

Incorrect answers:

All other answers choices are incorrect.