Page 1181 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 1181
D. VMs must be updated individually.
13. Some cloud-based service models require an organization to
perform some maintenance and take responsibility for some
security. Which of the following is a service model that places most
of these responsibilities on the organization leasing the cloud-
based resources?
A. IaaS
B. PaaS
C. SaaS
D. Hybrid
14. An organization is using a SaaS cloud-based service shared with
another organization. What type of cloud-based deployment model
does this describe?
A. Public
B. Private
C. Community
D. Hybrid
15. Backup tapes have reached the end of their lifecycle and need to be
disposed of. Which of the following is the most appropriate
disposal method?
A. Throw them away. Because they are at the end of their lifecycle,
it is not possible to read data from them.
B. Purge the tapes of all data before disposing of them.
C. Erase data off the tapes before disposing of them.
D. Store the tapes in a storage facility.
16. Which of the following can be an effective method of configuration
management using a baseline?
A. Implementing change management
B. Using images

