- (Exam Topic 3)
Where is a DLP solution generally installed when utilized for monitoring data in use?

1. A. Application server
2. B. Database server
3. C. Network perimeter
4. D. User’s client

Correct Answer: D
To monitor data in use, the DLP solution's optimal location would be on the user's client or workstation, where the data would be used or processed, and where it would be most vulnerable to access or exposure. The network perimeter is most appropriate for data in transit, and an application server would serve as middle stage between data at rest and data in use, but is a less correct answer than a user's client. A database server would be an example of a location appropriate for monitoring data at rest.

- (Exam Topic 4)
Which of the following are considered to be the building blocks of cloud computing?

1. A. CPU, RAM, storage, and networking
2. B. Data, CPU, RAM, and access control
3. C. Data, access control, virtualization, and services
4. D. Storage, networking, printing, and virtualization

Correct Answer: A

- (Exam Topic 4)
Countermeasures for protecting cloud operations against external attackers include all of the following except:

1. A. Continual monitoring for anomalous activity.
2. B. Detailed and extensive background checks.
3. C. Regular and detailed configuration/change management activities
4. D. Hardened devices and systems, including servers, hosts, hypervisors, and virtual machines.

Correct Answer: B
Background checks are controls for attenuating potential threats from internal actors; external threats aren’t likely to submit to background checks.

- (Exam Topic 4)
User access to the cloud environment can be administered in all of the following ways except:

1. A. Provider provides administration on behalf the customer
2. B. Customer directly administers access
3. C. Third party provides administration on behalf of the customer
4. D. Customer provides administration on behalf of the provider

Correct Answer: D
The customer does not administer on behalf of the provider. All the rest are possible options.

- (Exam Topic 3)
Which cloud deployment model is MOST likely to offer free or very cheap services to users?

1. A. Hybrid
2. B. Community
3. C. Public
4. D. Private

Correct Answer: C
Public clouds offer services to anyone, regardless of affiliation, and are the most likely to offer free services to users. Examples of public clouds with free services include iCloud, Dropbox, and OneDrive. Private cloud models are designed for specific customers and for their needs, and would not offer services to the public at large, for free or otherwise. A community cloud is specific to a group of similar organizations and would not offer free or widely available public services. A hybrid cloud model would not fit the specifics of the question.