Questions

1. Does FIPS define the security requirements for cryptography?
2. Which of the following defines the security compliance is primarily focused on personal data privacy?
   1. ISO 27018
   2. FIPS
   3. GDPR
   4. CIS
3. What can be considered cloud service abuse?
   1. Account sharing
   2. Brute-force logins
   3. API abuse
   4. All of the above

4. What is the CIS security benchmark used for?
   1. Anti-virus
   2. Defining secure configuration of the OS, platform, databases, and so on
   3. Firewall
   4. Integrity
5. Which role is involved with security practices during the DevOps cycle?
   1. QA
   2. RD
   3. Operations
   4. All of the above
6. How does the technology Infrastructure as Code help security operation teams?
   1. Virus detection
   2. Secure configuration
   3. Intrusion detection
   4. Encryption
7. Which of the following is not a privacy principle?
   1. Spoofing
   2. Purpose limitations
   3. Storage limitations
   4. Accuracy