- (Exam Topic 1)
Which of the following is not a risk management framework?

1. A. COBIT
2. B. Hex GBL
3. C. ISO 31000:2009
4. D. NIST SP 800-37

Correct Answer: B
Hex GBL is a reference to a computer part in Terry Pratchett’s fictional Discworld universe. The rest are not.

- (Exam Topic 2)
Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?

1. A. Infrastructure
2. B. Platform
3. C. Application
4. D. Data

Correct Answer: D
Regardless of which cloud-hosting model is used, the cloud customer always has sole responsibility for the data and its security.

- (Exam Topic 1)
What is the data encapsulation used with the SOAP protocol referred to?

1. A. Packet
2. B. Envelope
3. C. Payload
4. D. Object

Correct Answer: B
Simple Object Access Protocol (SOAP) encapsulates its information in what is known as a SOAP envelope and then leverages common communications protocols for transmission.

- (Exam Topic 3)
Humidity levels for a data center are a prime concern for maintaining electrical and computing resources properly as well as ensuring that conditions are optimal for top performance.
Which of the following is the optimal humidity level, as established by ASHRAE?

1. A. 20 to 40 percent relative humidity
2. B. 50 to 75 percent relative humidity
3. C. 40 to 60 percent relative humidity
4. D. 30 to 50 percent relative humidity

Correct Answer: C
The American Society of Heating, Refrigeration, and Air Conditioning Engineers (ASHRAE) recommends 40 to 60 percent relatively humidity for data centers. None of these options is the recommendation from ASHRAE.

- (Exam Topic 4)
Which protocol operates at the network layer and provides for full point-to-point encryption of all communications and transmissions?

1. A. IPSec
2. B. VPN
3. C. SSL
4. D. TLS

Correct Answer: A
IPSec is a protocol for encrypting and authenticating packets during transmission between two parties and can involve any type of device, application, or service. The protocol performs both the authentication and negotiation of security policies between the two parties at the start of the connection and then maintains these policies throughout the lifetime of the connection. TLS operates at the application layer, not the network layer, and is widely used to secure communications between two parties. SSL is similar to TLS but has been deprecated. Although a VPN allows a secure channel for communications into a private network from an outside location, it's not a protocol.