Brian is selecting a CASB for his organization and he would like to use an approach that interacts with the cloud provider directly. Which CASB approach is most appropriate for his needs?

What term describes an organization’s willingness to tolerate risk in their computing environment?

Ric is reviewing his organization’s network design and is concerned that a known flaw in the border router could let an attacker disable their Internet connectivity. Which of the following is an appropriate compensatory control?

In which cloud computing service model does the customer share responsibility with the cloud provider for datacenter security?

Which one of the following statements about inline CASB is incorrect?

What type of credential is commonly used to restrict access to an API?

Ben sets up a system that acts like a vulnerable host in order to observe attacker behavior. What type of system has he set up?

James is concerned that network traffic from his datacenter has increased and that it may be caused by a compromise that his security tools have not identified. What SIEM analysis capability could he use to look at the traffic over time sent by his datacenter systems?

Kevin recently identified a new security vulnerability and computed its CVSS base score as 6.5. Which risk category would this vulnerability fall into?

Which one of the following is not an example of a vulnerability scanning tool?