An organization is preparing to migrate its production environment systems from an onpremises
environment to a cloud service. The lead security architect is concerned that the
organization's current methods for addressing risk may not be possible in the cloud
environment.
Which of the following BEST describes the reason why traditional methods of addressing
risk may not be possible in the cloud?

A recent data breach stemmed from unauthorized access to an employee’s company
account with a cloud-based productivity suite. The attacker exploited excessive
permissions granted to a third-party OAuth application to collect sensitive information.
Which of the following BEST mitigates inappropriate access and permissions issues?

An organization is developing a disaster recovery plan that requires data to be backed up
and available at a moment’s notice.
Which of the following should the organization consider FIRST to address this
requirement?

A security analyst is trying to identify the source of a recent data loss incident. The analyst
has reviewed all the for the time surrounding the identified all the assets on the network at
the time of the data loss. The analyst suspects the key to finding the source was
obfuscated in an application. Which of the following tools should the analyst use NEXT?

A company’s Chief Information Security Officer is concerned that the company’s proposed
move to the cloud could lead to a lack of visibility into network traffic flow logs within the
VPC.
Which of the following compensating controls would be BEST to implement in this
situation?

A new web server must comply with new secure-by-design principles and PCI DSS. This
includes mitigating the risk of an on-path attack. A security analyst is reviewing the
following web server configuration:

Which of the following ciphers should the security analyst remove to support the business
requirements?