An organization uses Linux desktops, laptops, and servers for their primary infrastructure. The
company has a business need to run a mission critical application that is only available for the
Microsoft Windows operating system. This application and associated data need to be available to
10-12 users.

Which solution would best meet their needs, and why?

Which represents the contractual agreement between the service provider and the business?

What are elements of governance?

What should be the guiding principle of data ownership when using a service provider?

The Patriot Act is a law that, under special circumstances, allows warrantless search and seizure
of information. Which environment presents the highest risk to corporate information given the
Patriot Act?

This is the correct order of steps in the recommended risk assessment process?
1. Quick risk (L/M/H) check
2. Mitigation
3. Full risk assessment
4. Deploy
5. Evaluate

Why is there a need for a full risk assessment if a quick risk assessment has already been
performed?

A company has asked you to develop a framework for assuring trust in the VDC. An assessment
methodology is to be part of the framework.
Where should you look first for assessment criteria and methodologies?

What could delay a virtualization or cloud initiative?

What is (are) included in internal and external attestation?