- (Exam Topic 1)
Which of the following APIs are most commonly used within a cloud environment?

1. A. REST and SAML
2. B. SOAP and REST
3. C. REST and XML
4. D. XML and SAML

Correct Answer: B
Simple Object Access Protocol (SOAP) and Representational State Transfer (REST) are the most commonly used APIs within a cloud environment. Extensible Markup Language (XML) and Security Assertion Markup Language (SAML) are both standards for exchanging encoded data between two parties, with XML being for more general use and SAML focused on authentication and authorization data.

- (Exam Topic 4)
Deviations from the baseline should be investigated and _______.

1. A. Revealed
2. B. Documented
3. C. Encouraged
4. D. Enforced

Correct Answer: B
All deviations from the baseline should be documented, including details of the investigation and outcome. We do not enforce or encourage deviations. Presumably, we would already be aware of the deviation, so “revealing” is not a reasonable answer.

- (Exam Topic 4)
With an application hosted in a cloud environment, who could be the recipient of an eDiscovery order?

1. A. Users
2. B. Both the cloud provider and cloud customer
3. C. The cloud customer
4. D. The cloud provider

Correct Answer: B
Either the cloud customer or the cloud provider could receive an eDiscovery order, and in almost all circumstances they would need to work together to ensure compliance.

- (Exam Topic 1)
Which technology is NOT commonly used for security with data in transit?

1. A. DNSSEC
2. B. IPsec
3. C. VPN
4. D. HTTPS

Correct Answer: A
DNSSEC relates to the integrity of DNS resolutions and the prevention of spoofing or redirection, and does not pertain to the actual security of transmissions or the protection of data.

- (Exam Topic 3)
Which of the following roles would be responsible for managing memberships in federations and the use and integration of federated services?

1. A. Inter-cloud provider
2. B. Cloud service business manager
3. C. Cloud service administrator
4. D. Cloud service integrator

Correct Answer: A
The inter-cloud provider is responsible for peering with other cloud services and providers, as well as overseeing and managing federations and federated services. A cloud service administrator is responsible for testing, monitoring, and securing cloud services, as well as providing usage reporting and dealing with service problems. The cloud service integrator is responsible for connecting existing systems and services with a cloud. The cloud service business manager is responsible for overseeing the billing, auditing, and purchasing of cloud services.