Managing-Cloud-Security PDF問題集リアル2026最近更新された問題 [Q106-Q126]

質問 106
What must be provided by a European Union (EU) citizen, according to the General Data Protection Regulation (GDPR), before a firm may process the personal data of that individual?

質問 107
Which option should a cloud architect recommend to an organization looking to simplify development and management of applications?

質問 108
An organization is undergoing an ISO 27001 audit that includes a software as a service (SaaS) solution within scope, and the auditor has requested evidence of controls. What evidence should the organization provide the auditor?

質問 109
Which level of compliance is required by a cloud service provider to protect customer data at banks and insurance companies?

質問 110
Which type of risk comes from outsourcing significant vendor-specific investments for data, procedures, or processes to a cloud provider?

質問 111
Which regulation provides a guide for implementing the risk management framework?

質問 112
Which group should be notified for approval when a planned modification to an environment is scheduled?

質問 113
Which device is used to create and manage encryption keys used for data transmission in a cloud-based environment?

質問 114
Which legal framework is concerned with the privacy of data of EU/EEA citizens?

質問 115
Which requirement for cross-border data transfer is part of the General Data Protection Regulation (GDPR)?

質問 116
What should be done to data during the create phase of the data life cycle before being uploaded to the cloud?

質問 117
As part of training to help the data center engineers understand different attack vectors that affect the infrastructure, they work on a set of information about access and availability attacks that was presented. Part of the labs requires the engineers to identify different threat vectors and their names. Which threat prohibits the use of data by preventing access to it?

質問 118
Which role ensures that third parties take adequate technical and organizational security measures to safeguard data?

質問 119
Which phase in secure application design and development includes threat modeling?

質問 120
An accountant in an organization is allowed access to a company’s human resources database only to adjust the number of hours that the organization’s employees have worked in a fiscal year. However, the accountant modifies an employee’s personal information. Which part of the STRIDE model describes this situation?

質問 121
Which security measure controls virtualization in the cloud?

質問 122
Which open-source software (OSS) cloud computing platform provides a full set of features and components for a cloud environment?

質問 123
Which process is implemented during the hardening of an operating system (OS) and its workloads?

質問 124
Which design principle of secure cloud computing ensures that users have access to a large number of resources that grow based on user demand?

質問 125
An organization wants to ensure that all entities trust any certificate generated internally in the organization.
What should be used to generate these certificates?

質問 126
Which platform component includes containers and storage?