- (Exam Topic 2)
Which of the following is NOT one of five principles of SOC Type 2 audits?

1. A. Privacy
2. B. Processing integrity
3. C. Financial
4. D. Security

Correct Answer: C
The SOC Type 2 audits include five principles: security, privacy, processing integrity, availability, and confidentiality.

- (Exam Topic 2)
Which entity requires all collection and storing of data on their citizens to be done on hardware that resides within their borders?

1. A. Russia
2. B. France
3. C. Germany
4. D. United States

Correct Answer: A
Signed into law and effective starting on September 1, 2015, Russian Law 526-FZ establishes that any collecting, storing, or processing of personal information or data on Russian citizens must be done from systems and databases that are physically located with the Russian Federation.

- (Exam Topic 4)
The cloud customer’s trust in the cloud provider can be enhanced by all of the following except:

1. A. SLAs
2. B. Shared administration
3. C. Audits
4. D. real-time video surveillance

Correct Answer: D
Video surveillance will not provide meaningful information and will not enhance trust. All the others will do it.

- (Exam Topic 4)
In the cloud motif, the data processor is usually:

1. A. The cloud customer
2. B. The cloud provider
3. C. The cloud access security broker
4. D. The party that assigns access rights

Correct Answer: B
In legal terms, when “data processor” is defined, it refers to anyone who stores, handles, moves, or manipulates data on behalf of the data owner or controller. In the cloud computing realm, this is the cloud provider.

- (Exam Topic 1)
Why does a Type 1 hypervisor typically offer tighter security controls than a Type 2 hypervisor?

1. A. A Type 1 hypervisor also controls patching of its hosted virtual machines ensure they are always secure.
2. B. A Type 1 hypervisor is tied directly to the bare metal and only runs with code necessary to perform its specific mission.
3. C. A Type 1 hypervisor performs hardware-level encryption for tighter security and efficiency.
4. D. A Type 1 hypervisor only hosts virtual machines with the same operating systems as the hypervisor.

Correct Answer: B
Type 1 hypervisors run directly on top of the bare metal and only contain the code and functions required to perform their purpose. They do not rely on any other systems or contain extra features to secure.