1.
Which of the following components are part of what a CCSP should review when looking at contracting with a cloud service provider?
2.
Which of the following is not a way to manage risk?
3.
Which of the following terms is not associated with cloud forensics?
4.
Which is the lowest level of the CSA STAR program?
5.
Which of the following is the primary purpose of an SOC 3 report?
6.
Which of the following is not an example of a highly regulated environment?
7.
Which of the following methods of addressing risk is most associated with insurance?
8.
Legal controls refer to which of the following?
9.
Which of the following best describes a cloud carrier?
 
10.
Gap analysis is performed for what reason?