1244 お客様のコメント
質問 1：
IntSecureSoft Solutions Pvt. Ltd. is an IT company that develops software and applications for various educational institutions. The organization has been using Google cloud services for the past 10 years. Tara Reid works as a cloud security engineer in IntSecureSoft Solutions Pvt. Ltd.
She would like to identify various misconfigurations and vulnerabilities such as open storage buckets, instances that have not implemented SSL, and resources without an enabled Web UI.
Which of the following is a native scanner in the Security Command Center that assesses the overall security state and activity of virtual machines, containers, network, and storage along with the identity and access management policies?
A. Security Health Analytics
B. Synapse Analytics
C. Google Front End
D. Log Analytics Workspace
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
Curtis Morgan works as a cloud security engineer in an MNC. His organization uses Microsoft Azure for office-site backup of large files, disaster recovery, and business-critical applications that receive significant traffic, etc. Which of the following allows Curtis to establish a fast and secure private connection between multiple on-premises or shared infrastructures with Azure virtual private network?
A. Azure Front Door
B. Site-to-Site VPN
C. Point-to-Site VPN
D. Express Route
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
The e-commerce platform www.evoucher.com observes overspending 15% to 30% due to unawareness of the mistakes in threat detection and security governance while using the services of its cloud provider AWS. It feels it requires a well-thought-out roadmap to improve its cloud journey. How can the company accelerate its cloud journey with desired outcomes and business value?
A. By following AWS SMPM
B. By following AWS CAP
C. By following AWS IAM
D. By following Amazon ELB
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 4：
Rebecca Gibel has been working as a cloud security engineer in an IT company for the past
5 years. Her organization uses cloud-based services. Rebecca's organization contains personal information about its clients, which is encrypted and stored in the cloud environment. The CEO of her organization has asked Rebecca to delete the personal information of all clients who utilized their services between 2011 and 2015. Rebecca deleted the encryption keys that are used to encrypt the original data; this made the data unreadable and unrecoverable. Based on the given information, which deletion method was implemented by Rebecca?
A. Data Scrubbing
B. Crypto-Shredding
C. Data Erasure
D. Nulling Out
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
An IT company uses two resource groups, named Production-group and Security-group, under the same subscription ID. Under the Production-group, a VM called Ubuntul8 is suspected to be compromised. As a forensic investigator, you need to take a snapshot (ubuntudisksnap) of the OS disk of the suspect virtual machine Ubuntu18 for further investigation and copy the snapshot to a storage account under Security-group. Identify the next step in the investigation of the security incident in Azure?
A. Copy the snapshot to file share
B. Create a backup copy of snapshot in a blob container
C. Mount the snapshot onto the forensic workstation
D. Generate shared access signature
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 6：
Lexie Roth works as a cloud security engineer in an IT company located in Boston, Massachusetts. Her organization generates a huge amount of data. To increase the storage size, speed, and fault tolerance, Lexie would like to configure and create a RAID. Therefore, she created a RAID on Windows Server 2016, which includes block-level striping with a distributed parity. The parity information is distributed among all drives, except one. The data chunks in the RAID are larger than the regular I/O size, but they can be re-sized. To prevent data loss after a drive fails, data are calculated from the distributed parity. The RAID configured by Lexie requires at least three disks, but for robust performance, Lexie used seven disks. Based on the given information, which of the following RAID was configured and created by Lexie?
A. RAID 5
B. RAID 0
C. RAID 3
D. RAID 1
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 7：
The tech giant TSC uses cloud for its operations. As a cloud user, it should implement an effective risk management lifecycle to measure and monitor high and critical risks regularly.
Additionally, TSC should define what exactly should be measured and the acceptable variance to ensure timely mitigated risks. In this case, which of the following can be used as a tool for cloud risk management?
A. Committee of Sponsoring Organizations
B. Cloud Security Alliance
C. Information System Audit and Control Association
D. CSA CCM Framework
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 8：
Global CloudEnv is a cloud service provider that provides various cloud-based services to cloud consumers. The cloud service provider adheres to the framework that can be used as a tool to systematically assess cloud implementation by providing guidance on the security controls that should be implemented by specific actors within the cloud supply chain. It is used as the standard to assess the security posture of organizations on the Security, Trust, Assurance, and Risk (STAR) registry. Based on the given information, which of the following cybersecurity control frameworks does Global CloudEnv adhere to?
A. CSA CAIQ
B. CSA CCM
C. CDMI
D. ITU-T X.1601
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 9：
VenturiaCloud is a cloud service provider that offers robust and cost-effective cloud-based services to cloud consumers. The organization became a victim of a cybersecurity attack. An attacker performed a DDoS attack over the cloud that caused failure in the entire cloud environment. VenturiaCloud conducted a forensics investigation. Who among the following are the first line of defense against cloud security attacks with their primary role being responding against any type of security incident immediately?
A. Law Advisors
B. Investigators
C. IT Professionals
D. Incident Handlers
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
IntSecureSoft Solutions Pvt. Ltd. is an IT company that develops software and applications for various educational institutions. The organization has been using Google cloud services for the past 10 years. Tara Reid works as a cloud security engineer in IntSecureSoft Solutions Pvt. Ltd.
She would like to identify various misconfigurations and vulnerabilities such as open storage buckets, instances that have not implemented SSL, and resources without an enabled Web UI.
Which of the following is a native scanner in the Security Command Center that assesses the overall security state and activity of virtual machines, containers, network, and storage along with the identity and access management policies?
A. Security Health Analytics
B. Synapse Analytics
C. Google Front End
D. Log Analytics Workspace
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
Curtis Morgan works as a cloud security engineer in an MNC. His organization uses Microsoft Azure for office-site backup of large files, disaster recovery, and business-critical applications that receive significant traffic, etc. Which of the following allows Curtis to establish a fast and secure private connection between multiple on-premises or shared infrastructures with Azure virtual private network?
A. Azure Front Door
B. Site-to-Site VPN
C. Point-to-Site VPN
D. Express Route
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
The e-commerce platform www.evoucher.com observes overspending 15% to 30% due to unawareness of the mistakes in threat detection and security governance while using the services of its cloud provider AWS. It feels it requires a well-thought-out roadmap to improve its cloud journey. How can the company accelerate its cloud journey with desired outcomes and business value?
A. By following AWS SMPM
B. By following AWS CAP
C. By following AWS IAM
D. By following Amazon ELB
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 4：
Rebecca Gibel has been working as a cloud security engineer in an IT company for the past
5 years. Her organization uses cloud-based services. Rebecca's organization contains personal information about its clients, which is encrypted and stored in the cloud environment. The CEO of her organization has asked Rebecca to delete the personal information of all clients who utilized their services between 2011 and 2015. Rebecca deleted the encryption keys that are used to encrypt the original data; this made the data unreadable and unrecoverable. Based on the given information, which deletion method was implemented by Rebecca?
A. Data Scrubbing
B. Crypto-Shredding
C. Data Erasure
D. Nulling Out
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
An IT company uses two resource groups, named Production-group and Security-group, under the same subscription ID. Under the Production-group, a VM called Ubuntul8 is suspected to be compromised. As a forensic investigator, you need to take a snapshot (ubuntudisksnap) of the OS disk of the suspect virtual machine Ubuntu18 for further investigation and copy the snapshot to a storage account under Security-group. Identify the next step in the investigation of the security incident in Azure?
A. Copy the snapshot to file share
B. Create a backup copy of snapshot in a blob container
C. Mount the snapshot onto the forensic workstation
D. Generate shared access signature
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 6：
Lexie Roth works as a cloud security engineer in an IT company located in Boston, Massachusetts. Her organization generates a huge amount of data. To increase the storage size, speed, and fault tolerance, Lexie would like to configure and create a RAID. Therefore, she created a RAID on Windows Server 2016, which includes block-level striping with a distributed parity. The parity information is distributed among all drives, except one. The data chunks in the RAID are larger than the regular I/O size, but they can be re-sized. To prevent data loss after a drive fails, data are calculated from the distributed parity. The RAID configured by Lexie requires at least three disks, but for robust performance, Lexie used seven disks. Based on the given information, which of the following RAID was configured and created by Lexie?
A. RAID 5
B. RAID 0
C. RAID 3
D. RAID 1
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 7：
The tech giant TSC uses cloud for its operations. As a cloud user, it should implement an effective risk management lifecycle to measure and monitor high and critical risks regularly.
Additionally, TSC should define what exactly should be measured and the acceptable variance to ensure timely mitigated risks. In this case, which of the following can be used as a tool for cloud risk management?
A. Committee of Sponsoring Organizations
B. Cloud Security Alliance
C. Information System Audit and Control Association
D. CSA CCM Framework
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 8：
Global CloudEnv is a cloud service provider that provides various cloud-based services to cloud consumers. The cloud service provider adheres to the framework that can be used as a tool to systematically assess cloud implementation by providing guidance on the security controls that should be implemented by specific actors within the cloud supply chain. It is used as the standard to assess the security posture of organizations on the Security, Trust, Assurance, and Risk (STAR) registry. Based on the given information, which of the following cybersecurity control frameworks does Global CloudEnv adhere to?
A. CSA CAIQ
B. CSA CCM
C. CDMI
D. ITU-T X.1601
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 9：
VenturiaCloud is a cloud service provider that offers robust and cost-effective cloud-based services to cloud consumers. The organization became a victim of a cybersecurity attack. An attacker performed a DDoS attack over the cloud that caused failure in the entire cloud environment. VenturiaCloud conducted a forensics investigation. Who among the following are the first line of defense against cloud security attacks with their primary role being responding against any type of security incident immediately?
A. Law Advisors
B. Investigators
C. IT Professionals
D. Incident Handlers
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
河合** -
312-40ソフトバージョンをダウンロードできるのも非常にありがたいです。詳細に、312-40出題がされているので非常に役に立っています。