The identity management process of allowing users in different security domains to share services without having identities in each domain is called what?

The identity management process of allowing users in different security domains to share services without having identities in each domain is called what?

A. Single-sign on
B. Federated
C. Authentication
D. Authorization


Answer: Federated

Which of the following is not a legal risk associated with cloud computing?

Which of the following is not a legal risk associated with cloud computing?

A. Data isolation
B. Jurisdiction
C. Cost
D. Electronic discovery


Answer: Cost

True or false? The United States and the European Union have compatible data privacy laws.

True or false? The United States and the European Union have compatible data privacy laws.

Answer: False

Authentication to multiple services in the cloud can be streamlined by adopting which of the following identity management mechanisms?

Authentication to multiple services in the cloud can be streamlined by adopting which of the following identity management mechanisms?

A. Kerberos
B. Integrated Windows authentication
C. Single sign-on
D. Authorization


Answer: Single Sign-On

Which of the following actions would not lead to risks related to records retention in the cloud?

Which of the following actions would not lead to risks related to records retention in the cloud?

A. Secure destruction of records on schedule
B. Restrictions on archived storage
C. Difficulties associating metadata with archived records
D. Unauthorized access


Answer: Unauthorized Access

True or false? Government agencies must always notify a data owner when they compel disclosure of information from a cloud service provider as part of lawful access.

True or false? Government agencies must always notify a data owner when they compel disclosure of information from a cloud service provider as part of lawful access.

Answer: False

An organization can address regulatory compliance risks in the cloud in all the following ways except which one?

An organization can address regulatory compliance risks in the cloud in all the following ways except which one?

A. Its own security policies
B. Periodic audits
C. Service-level agreements with cloud providers
D. Delegation of full responsibility for compliance to the cloud service provider


Answer: Delegation of full responsibility for compliance to the cloud service provider

True or false? Dynamic scaling of resources in the cloud may lead to noncompliance with software licenses.

True or false? Dynamic scaling of resources in the cloud may lead to noncompliance with software licenses.

Answer: True

Which countries could claim jurisdiction over data in the cloud?

Which countries could claim jurisdiction over data in the cloud?

A. The country in which physical servers storing data reside
B. The countries that data passes through between the provider's servers
C. The country in which the data owner resides
D. All of the above


Answer: All of the Above

What is the process of verifying a user's identity?

What is the process of verifying a user's identity?

A. Authorization
B. Authentication
C. Logging In
D. Access Control


Answer: Authentication