Which of the following BEST describes the purpose of the reference monitor when defining access control to enforce the security model? A. Strong operational security to keep unit members safe B. Policies to validate organization rules C. Cyber hygiene to ensure organizations can keep systems healthy D. Quality design principles to ensure quality by design

https://xkcd.com/257/

What form of encryption can provide secure communications between two parties when they have no prior method of communicating securely? A. Symmetric B. Block Cypher C. Asymmetric D. AES

Jim's organization-wide implementation of IDaaS offers broad support for cloud-based applications. Jim's company does not have internal identity management staff and does not use centralized identity services. Instead, they rely upon Active Directory for AAA services. Which of the following options should Jim recommend to best handle the company's on-site identity needs? A Integrate on-site systems using OAuth. B Use an on-premises third-party identity service. C Integrate on-site systems using SAML. D Design an internal solution to handle the organization's unique needs. B

Which of the following statements BEST describes least privilege principle in a cloud environment? - A. A single cloud administrator is configured to access core functions. - B. Internet traffic is inspected for all incoming and outgoing packets. - C. Routing configurations are regularly updated with the latest routes. - D. Network segments remain private if unneeded to access the internet.