Chapter 6 - Things To Know

Question 1

What are the securities?

Answer 1

Security Governance, Risk and Compliance (GRC) and data security comes under enterprise responsibility
Physical Security and Infrastructure Security comes under Cloud Provider Responsibility

Question 2

What are the methods used in securing the networking architecture and components?

Answer 2

Vulnerbility Assessment
Firewall
Honeypot
IDS/IPS

Question 3

What are the methods to protect data in transit?

Answer 3

Encryption
Virtual Private Network
Strong Authentication

Question 4

What are the cloud service types?

Answer 4

PaaS
SaaS
laaS

Question 5

What are the ways used for hardening the OS?

Answer 5

Removing unnecessary services and libraries
Closing unused ports
Installing antimalware agents 
Limiting administrator access
Ensuring event logging is enabled

Question 6

What are the processes that facilitate the data access methods?

Answer 6

Customer Directly Administers Access
Provider Administers Access on behalf of the Customer
Third-Party Administers Access on behalf of the Customer

Question 7

What are the SOC report categories?

Answer 7

SOC 1
SOC 2
SOC 3