2025年最新の有効な312-40テスト解答とEC-COUNCIL試験PDF問題を試そう [Q53-Q71]

2025年最新の有効な312-40テスト解答とEC-COUNCIL試験PDF問題を試そう

無料EC-COUNCIL 312-40試験問題と解答トレーニングを提供していますFast2test

質問 # 53
Cindy Williams works as a cloud security engineer in an IT company located in Seattle, Washington. Owing to the cost-effective security, governance, and storage features provided by AWS, her organization adopted AWS cloud-based services. Cindy would like to detect any unusual activity in her organization's AWS account. She would like to obtain the event history of her organization's AWS account activity for security analysis and resource change tracking. Which of the following AWS service enables operational auditing, compliance, governance, and risk auditing for her organization's AWS account?

A. AWS Config
B. AWS Security Hub
C. AWS CloudFormation
D. AWS CloudTrail

正解：D

解説：
AWS CloudTrail: AWS CloudTrail is an AWS service that helps you enable operational and risk auditing, governance, and compliance of your AWS account1.
Event History: CloudTrail records actions taken by a user, role, or an AWS service as events. This includes actions taken in the AWS Management Console, AWS Command Line Interface, and AWS SDKs and APIs1.
Security Analysis: By providing a history of AWS account activity, CloudTrail enables security analysis and resource change tracking, which is essential for detecting unusual activities1.
Compliance: CloudTrail supports compliance by providing an immutable log of all the management events that occurred within the AWS account, which is crucial for audit trails1.
Operational Auditing: It allows organizations to conduct operational auditing by keeping track of user and API activity on AWS, which can be used to identify security incidents1.
Reference:
AWS CloudTrail User Guide1.

質問 # 54
Martin Sheen is a senior cloud security engineer in SecGlob Cloud Pvt. Ltd. Since 2012, his organization has been using AWS cloud-based services. Using an intrusion detection system and antivirus software, Martin noticed that an attacker is trying to breach the security of his organization. Therefore, Martin would like to identify and protect the sensitive data of his organization. He requires a fully managed data security service that supports S3 storage and provides an inventory of publicly shared buckets, unencrypted buckets, and the buckets shared with AWS accounts outside his organization. Which of the following Amazon services fulfills Martin's requirement?

A. Amazon Security Hub
B. Amazon GuardDuty
C. Amazon Macie
D. Amazon Inspector

正解：C

解説：

Amazon S3
Explore
Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data in AWS. It is specifically designed to support Amazon S3 storage and provides an inventory of S3 buckets, helping organizations like SecGlob Cloud Pvt. Ltd. to identify and protect their sensitive data.
Here's how Amazon Macie fulfills Martin's requirements:
* Sensitive Data Identification: Macie automatically and continuously discovers sensitive data, such as personally identifiable information (PII), in S3 buckets.
* Inventory and Monitoring: It provides an inventory of S3 buckets, detailing which are publicly accessible, unencrypted, or shared with accounts outside the organization.
* Alerts and Reporting: Macie generates detailed alerts and reports when it detects unauthorized access or inadvertent data leaks.
* Data Security Posture: It helps improve the data security posture by providing actionable recommendations for securing S3 buckets.
* Compliance Support: Macie aids in compliance efforts by monitoring data access patterns and ensuring that sensitive data is handled according to policy.
References:
* AWS documentation on Amazon Macie, which outlines its capabilities for protecting sensitive data in S31.
* An AWS blog post discussing how Macie can be used to identify and protect sensitive data in S3 buckets1.

質問 # 55
SecAppSol Pvt. Ltd. is a cloud software and application development company located in Louisville, Kentucky. The security features provided by its previous cloud service provider was not satisfactory, and in 2012, the organization became a victim of eavesdropping. Therefore, SecAppSol Pvt. Ltd. changed its cloud service provider and adopted AWS cloud-based services owing to its robust and cost-effective security features. How does SecAppSol Pvt. Ltd.'s security team encrypt the traffic between the load balancer and client that initiate SSL or TLS sessions?

A. By enabling Cloud Identity Aware Proxy
B. By enabling HTTPS listener
C. By enabling RADIUS Authentication
D. By enabling Amazon GuardDuty

正解：B

解説：
To encrypt the traffic between the load balancer and clients that initiate SSL or TLS sessions, SecAppSol Pvt. Ltd.'s security team would enable an HTTPS listener on their load balancer. This is a common method used in AWS to secure communication.
Here's how it works:
HTTPS Listener Configuration: The security team configures the load balancer with an HTTPS listener, which listens for incoming SSL or TLS connections on a specified port (usually port 443).
SSL/TLS Certificates: They deploy SSL/TLS certificates on the load balancer. These certificates are used to establish a secure connection and encrypt the traffic.
Secure Communication: When a client initiates a session, the HTTPS listener uses the SSL/TLS certificate to perform a handshake, establish a secure connection, and encrypt the data in transit.
Backend Encryption: Optionally, the load balancer can also be configured to encrypt traffic to the backend servers, ensuring end-to-end encryption.
Security Policies: The security team sets security policies on the load balancer to define the ciphers and protocols used for SSL/TLS, further enhancing security.
Reference:
AWS documentation on configuring end-to-end encryption in a load-balanced environment, which includes setting up an HTTPS listener1.
AWS documentation on creating an HTTPS listener for your Application Load Balancer, detailing the process and requirements2.

質問 # 56
A company is a third-party vendor for several organizations and provides them customized software and products to cater to their needs. It recently moved its infrastructure and applications on cloud. Its applications are not working on the cloud as expected. The developers and testers are experiencing significant difficulty in managing and deploying the code in the cloud. Which of the following will help them with automated integration, development, testing, and deployment in the cloud?

A. SIEM
B. Dashboard
C. Vulnerability assessment tool
D. DevOps

正解：D

解説：
For a company that provides customized software and products and has recently moved its infrastructure and applications to the cloud, the best option to help with automated integration, development, testing, and deployment in the cloud is DevOps.
* Understanding DevOps: DevOps is a set of practices that combines software development (Dev) and IT operations (Ops). It aims to shorten the systems development life cycle and provide continuous delivery with high software quality1.
* Automated Processes: DevOps encourages automating the software delivery process, which includes:
* Continuous Integration (CI): Developers merge code changes into a central repository, after which automated builds and tests are run.
* Continuous Delivery (CD): The code changes are automatically built, tested, and prepared for a release to production.
* Continuous Deployment: This goes one step further than continuous delivery. Every change that passes all stages of the production pipeline is released to customers. There's no human intervention, and only a failed test will prevent a new change to be deployed to production1.
* Benefits of DevOps:
* Improved Collaboration: DevOps practices encourage collaboration between development and
* operations teams, resulting in better communication and collaboration.
* Increased Efficiency: Automation and consistency help your team do more, in less time, with significantly fewer bugs.
* Faster Resolution of Problems: Continuous monitoring and automated testing mean you can identify and address bugs more quickly, often before they become a problem for users1.
* Why Not the Others?:
* A vulnerability assessment tool is used for identifying and assessing the vulnerabilities in a system, not for deployment.
* SIEM (Security Information and Event Management) is used for real-time analysis of security alerts generated by applications and network hardware, not for deployment.
* A dashboard is a type of graphical user interface that provides an overview of a system's key performance indicators, not for deployment.
References:
* Google Cloud Architecture Center: Application deployment and testing strategies2.
* Google Cloud Architecture Center: Automate your deployments1.
* IBM Cloud Learn Hub: What is Cloud Automation?3.

質問 # 57
Global SoftTechSol is a multinational company that provides customized software solutions and services to various clients located in different countries. It uses a public cloud to host its applications and services. Global SoftTechSol uses Cloud Debugger to inspect the current state of a running application in real-time, find bugs, and understand the behavior of the code in production. Identify the service provider that provides the Cloud Debugger feature to Global SoftTechSol?

A. Google
B. Azure
C. IBM
D. AWS

正解：A

解説：
Cloud Debugger is a feature provided by Google Cloud that allows developers to inspect the state of a running application in real-time. It is used to find bugs and understand the behavior of code in production without stopping or slowing down the application.
Here's how Cloud Debugger works for Global SoftTechSol:
* Real-Time Inspection: Developers can take a snapshot of an application at any point in time to capture its state, including call stacks, variables, and expressions.
* Non-Disruptive: Cloud Debugger operates without affecting the performance of the application, allowing debugging in production.
* Code Understanding: It helps developers understand the behavior of their code under real-world conditions.
* Integration: Cloud Debugger is integrated with other Google Cloud services, providing a seamless debugging experience.
* Security: It ensures that sensitive data is protected during the debugging process.
References:
* Google Cloud documentation on Cloud Debugger1.
* A blog post by Google Cloud detailing the capabilities of Cloud Debugger2.

質問 # 58
Ocular Private Ltd. is an IT company that develops software related to graphic design. The organization has been using Google cloud services. Margot Robbie has been working as a cloud security engineer in Ocular Private Ltd. over the past three years. She uses the CCP Cloud Operations Suite (formerly Stack Driver} logging and monitoring tool to monitor and debug CCP hosted applications. Margot would like to monitor a compute engine instance with cloud monitoring; therefore, she created a compute engine instance, then she installed the cloud monitoring agent. Which of the following command can Margot use to start the cloud monitoring agent?

A. sudo service stackdriver.agent start
B. sudo stackdriver-agent start
C. sudo service stackdriver-agent start
D. sudo stackdriver.agent start

正解：C

質問 # 59
A cloud organization, AZS, wants to maintain homogeneity in its cloud operations because the CPU speed measured by AZS varies and the measurement units lack consistency in the standards. For example, AWS defines the CPU speed with Elastic Compute Unit, Google with Google Compute Engine Unit, and Microsoft with clock speed. Here, which cloud computing standard can leverage frameworks and architectures specific to the cloud for maintaining homogeneity in operations?

A. occ
B. CSA
C. DMTF
D. NIST

正解：D

解説：

Cloud computing
Explore
* Cloud Computing Standards: Cloud computing standards are essential for ensuring consistency and interoperability among different cloud service providers1.
* Homogeneity in Operations: Maintaining homogeneity in operations across various cloud platforms requires a standard that provides frameworks and architectures specific to cloud computing1.
* NIST's Role: The National Institute of Standards and Technology (NIST) has developed a cloud computing standards roadmap that includes frameworks and architectures for cloud computing. This roadmap aims to promote cloud computing standards and ensure homogeneity in operations1.
* CPU Speed Measurement: NIST's standards can help organizations like AZS to have a consistent approach to measuring CPU speed across different cloud providers, despite the different units of measurement used by AWS, Google, and Microsoft1.
* Exclusion of Other Options: While other organizations like DMTF and CSA contribute to cloud standards, NIST is specifically recognized for its work in creating a comprehensive framework that addresses the need for homogeneity in cloud operations1.
References:
* NIST Cloud Computing Standards Roadmap1.

質問 # 60
The e-commerce platform www.evoucher.com observes overspending 15% to 30% due to unawareness of the mistakes in threat detection and security governance while using the services of its cloud provider AWS. It feels it requires a well-thought-out roadmap to improve its cloud journey. How can the company accelerate its cloud journey with desired outcomes and business value?

A. By following AWS IAM
B. By following Amazon ELB
C. By following AWS SMPM
D. By following AWS CAF

正解：D

解説：
To address the issue of overspending and improve the cloud journey with desired outcomes and business value, the e-commerce platform www.evoucher.com should follow the AWS Cloud Adoption Framework (AWS CAF).
Understanding AWS CAF: The AWS CAF is a guidance framework developed by Amazon Web Services to help organizations design and implement effective cloud adoption strategies. It outlines best practices and provides a structured approach to cloud adoption by breaking down the process into manageable perspectives, each focusing on specific aspects of the transition1.
Benefits of AWS CAF:
Reduce Business Risk: AWS CAF helps in understanding all standards and requirements to maintain data security and privacy during cloud migration2.
Accelerate Innovation: It allows businesses to quickly benefit from the scalability and flexibility of cloud-based infrastructure2.
Enhance Agility: AWS CAF provides a clear and highly-structured approach to digital transformation, defining a cloud adoption strategy and outlining the main steps in detail2.
Addressing Overspending: By following AWS CAF, www.evoucher.com can identify and mitigate risks, manage costs, and ensure compliance as they move their workloads to the cloud. This structured approach will help in avoiding mistakes in threat detection and security governance, which are contributing to the overspending1.
Reference:
AWS Cloud Adoption Framework1.
What is a Cloud Adoption Framework? - CAF Explained2.
Understanding AWS Cloud Adoption Framework (CAF)3.

質問 # 61
On database system of a hospital maintains rarely-accessed patients' data such as medical records including high-resolution images of ultrasound reports, MRI scans, and X-Ray reports for years. These records occupy a lot of space and need to be kept safe as it contains sensitive medical dat a. Which of the following Azure storage services best suitable for such rarely-accessed data with flexible latency requirement?

A. Azure Recovery Services Vault
B. Azure File Sync
C. Azure Archive Storage
D. Azure Backup: Restore-as-a-Service

正解：C

解説：
Data Characteristics: The hospital's database system contains rarely-accessed, sensitive medical records, including high-resolution images, which require secure and cost-effective long-term storage1.
Azure Archive Storage: Azure Archive Storage is designed for data that is rarely accessed and has flexible latency requirements. It offers a cost-effective solution for storing large volumes of data that does not need to be accessed frequently1.
Security and Compliance: Azure Archive Storage provides secure storage for sensitive medical data, ensuring compliance with healthcare regulations such as HIPAA and GDPR1.
Cost Efficiency: By using Azure Archive Storage, the hospital can significantly reduce storage costs compared to storing data on higher-performance tiers that are intended for frequently accessed data1.
Exclusion of Other Options: Azure Backup and Azure Recovery Services Vault are primarily used for backup and disaster recovery, not for archiving. Azure File Sync is used for syncing files across multiple locations and is not optimized for archival purposes1.
Reference:
Microsoft Azure's official page on Azure Archive Storage1.

質問 # 62
Alice, a cloud forensic investigator, has located, a relevant evidence during his investigation of a security breach in an organization's Azure environment. As an investigator, he needs to sync different types of logs generated by Azure resources with Azure services for better monitoring. Which Azure logging and auditing feature can enable Alice to record information on the Azure subscription layer and obtain the evidence (information related to the operations performed on a specific resource, timestamp, status of the operation, and the user responsible for it)?

A. Azure Activity Logs
B. Azure Resource Logs
C. Azure Active Directory Reports
D. Azure Storage Analytics Logs

正解：A

解説：
Azure Activity Logs provide a record of operations performed on resources within an Azure subscription.
They are essential for monitoring and auditing purposes, as they offer detailed information on the operations, including the timestamp, status, and the identity of the user responsible for the operation.
Here's how Azure Activity Logs can be utilized by Alice:
* Recording Operations: Azure Activity Logs record all control-plane activities, such as creating, updating, and deleting resources through Azure Resource Manager.
* Evidence Collection: For forensic purposes, these logs are crucial as they provide evidence of the operations performed on specific resources.
* Syncing Logs: Azure Activity Logs can be integrated with Azure services for better monitoring and can be synced with other tools for analysis.
* Access and Management: Investigators like Alice can access these logs through the Azure portal, Azure CLI, or Azure Monitor REST API.
* Security and Compliance: These logs are also used for security and compliance, helping organizations to meet regulatory requirements.
References:
* Microsoft Learn documentation on Azure security logging and auditing, which includes details on Azure Activity Logs1.
* Azure Monitor documentation, which provides an overview of the monitoring solutions and mentions the use of Azure Activity Logs2.

質問 # 63
Maria Howell has been working as a senior cloud security engineer in an loT manufacturing company. Her organization designs, develops, and tests loT devices. It uses Microsoft Azure cloud-based services. Maria had no knowledge of data science and the various ML and Al models used for data analysis, but she would like to analyze the time-series data generated from loT devices to monitor and identify abnormalities. Which of the following is an Al-based Azure service that can help Maria in monitoring and identifying the abnormalities in time series data without requiring any knowledge of machine learning?

A. Application Insights
B. Anomaly Detector
C. Azure Sentinel
D. Cloud App Security

正解：C

質問 # 64
Shannon Elizabeth works as a cloud security engineer in VicPro Soft Pvt. Ltd. Microsoft Azure provides all cloud-based services to her organization. Shannon created a resource group (ProdRes), and then created a virtual machine (myprodvm) in the resource group. On myprodvm virtual machine, she enabled JIT from the Azure Security Center dashboard. What will happen when Shannon enables JIT VM access?

A. It locks down the outbound traffic from myprodvm by creating a rule in the network security group
B. It locks down the outbound traffic to myprodvm by creating a rule in the Azure firewall
C. It locks down the inbound traffic from myprodvm by creating a rule in the network security group
D. It locks down the inbound traffic to myprodvm by creating a rule in the Azure firewall

正解：D

解説：
When Shannon Elizabeth enables Just-In-Time (JIT) VM access on the myprodvm virtual machine from the Azure Security Center dashboard, the following happens:
* Inbound Traffic Control: JIT VM access locks down the inbound traffic to the virtual machine.
* Azure Firewall Rule: It creates a rule in the Azure firewall to control this inbound traffic, allowing access only when required and for a specified duration.
* Enhanced Security: This approach minimizes exposure to potential attacks by reducing the time that the VM ports are open.
References:
* Azure Security Center Documentation: Just-In-Time VM Access
* Microsoft Learn: Configure Just-In-Time VM Access in Azure

質問 # 65
A multinational company decided to shift its organizational infrastructure and data to the cloud. Their team finalized the service provider. Which of the following is a contract that can define the security standards agreed upon by the service provider to maintain the security of the organizational data and infrastructure and define organizational data compliance?

A. Service Level Contract
B. Service Level Agreement
C. Service Agreement
D. Compliance Agreement

正解：B

解説：
* Service Level Agreement (SLA): An SLA is a contract between a service provider and the customer that specifies, usually in measurable terms, what services the service provider will furnish1.
* Security Standards in SLAs: SLAs often include security standards that the service provider agrees to maintain. This can cover various aspects such as data encryption, access controls, and incident response times1.
* Data Compliance: The SLA can also define compliance with relevant regulations and standards, ensuring that the service provider adheres to laws such as GDPR, HIPAA, or industry-specific guidelines2.
* Alignment with Business Needs: By clearly stating the security measures and compliance standards, an SLA helps ensure that the cloud services align with the multinational company's business needs and regulatory requirements1.
* Other Options: While service agreements and contracts may contain similar terms, the term "Service Level Agreement" is specifically used in the context of IT services to define performance and quality metrics, making it the most appropriate choice for defining security standards and compliance in cloud services1.
References:
* DigitalOcean's article on Cloud Compliance1.
* CrowdStrike's guide on Cloud Compliance2.

質問 # 66
Shannon Elizabeth works as a cloud security engineer in VicPro Soft Pvt. Ltd. Microsoft Azure provides all cloud-based services to her organization. Shannon created a resource group (ProdRes), and then created a virtual machine (myprodvm) in the resource group. On myprodvm virtual machine, she enabled JIT from the Azure Security Center dashboard. What will happen when Shannon enables JIT VM access?

A. It locks down the outbound traffic from myprodvm by creating a rule in the network security group
B. It locks down the outbound traffic to myprodvm by creating a rule in the Azure firewall
C. It locks down the inbound traffic from myprodvm by creating a rule in the network security group
D. It locks down the inbound traffic to myprodvm by creating a rule in the Azure firewall

正解：D

解説：
When Shannon Elizabeth enables Just-In-Time (JIT) VM access on the myprodvm virtual machine from the Azure Security Center dashboard, the following happens:
Inbound Traffic Control: JIT VM access locks down the inbound traffic to the virtual machine.
Azure Firewall Rule: It creates a rule in the Azure firewall to control this inbound traffic, allowing access only when required and for a specified duration.
Enhanced Security: This approach minimizes exposure to potential attacks by reducing the time that the VM ports are open.
Reference:
Azure Security Center Documentation: Just-In-Time VM Access
Microsoft Learn: Configure Just-In-Time VM Access in Azure

質問 # 67
WinSun Computers is a software firm that adopted cloud computing. To keep the cloud environment secure, the organization must ensure that it adheres to the regulations, controls, and rules framed by its management in the cloud environment. Which of the following represents the adherence to these regulations, controls, and rules framed by the organization in this scenario?

A. Risk Management
B. Governance
C. Regulatory Compliance
D. Corporate Compliance

正解：C

解説：
In the context of cloud computing, adherence to the regulations, controls, and rules framed by an organization's management in the cloud environment is best described as Governance.
Governance Defined: Governance in cloud computing refers to the policies, processes, and procedures that an organization puts in place to ensure its cloud environment aligns with its business goals, complies with legal and regulatory requirements, and manages risks effectively1.
Importance of Governance:
Ensures Compliance: Helps ensure that the organization's cloud usage complies with all relevant laws, regulations, and standards.
Risk Management: Part of governance is identifying and managing risks associated with cloud computing.
Operational Control: Provides a framework for decision-making and accountability within the cloud environment.
Why Not the Others?:
Risk Management: While risk management is a component of governance, it does not encompass the entire scope of adherence to regulations, controls, and rules.
Regulatory Compliance: This term specifically refers to compliance with laws and regulations, which is a subset of governance.
Corporate Compliance: Similar to regulatory compliance, corporate compliance focuses on adherence to laws, regulations, and company policies, but governance is a broader term that includes these aspects and more.
Reference:
Cloud Compliance: Regulations and Best Practices1.
Understanding Cloud Compliance For Data Security and Privacy2.
What is Cloud Security Compliance?3.

質問 # 68
SecureSoft IT Pvt. Ltd. is an IT company located in Charlotte, North Carolina, that develops software for the healthcare industry. The organization generates a tremendous amount of unorganized data such as video and audio files. Kurt recently joined SecureSoft IT Pvt. Ltd. as a cloud security engineer. He manages the organizational data using NoSQL databases. Based on the given information, which of the following data are being generated by Kurt's organization?

A. Structured Data
B. Metadata
C. Unstructured Data
D. Semi-Structured Data

正解：C

解説：
The data generated by SecureSoft IT Pvt. Ltd., which includes video and audio files, is categorized as unstructured data. This is because it does not follow a specific format or structure that can be easily stored in traditional relational databases.
* Understanding Unstructured Data: Unstructured data refers to information that either does not have a pre-defined data model or is not organized in a pre-defined manner. It includes formats like audio, video, and social media postings.
* Role of NoSQL Databases: NoSQL databases are designed to store, manage, and retrieve unstructured data efficiently. They can handle a variety of data models, including document, graph, key-value, and wide-column stores.
* Management of Data: As a cloud security engineer, Kurt's role involves managing this unstructured data using NoSQL databases, which provide the flexibility required for such diverse data types.
* Significance in Healthcare: In the healthcare industry, unstructured data is particularly prevalent due to the vast amounts of patient information, medical records, imaging files, and other forms of data that do not fit neatly into tabular forms.
References:Unstructured data is a common challenge in the IT sector, especially in fields like healthcare that generate large volumes of complex data. NoSQL databases offer a solution to manage this data effectively, providing scalability and flexibility. SecureSoft IT Pvt. Ltd.'s use of NoSQL databases aligns with industry practices for handling unstructured data efficiently.

質問 # 69
Curtis Morgan works as a cloud security engineer in an MNC. His organization uses Microsoft Azure for office-site backup of large files, disaster recovery, and business-critical applications that receive significant traffic, etc.
Which of the following allows Curtis to establish a fast and secure private connection between multiple on-premises or shared infrastructures with Azure virtual private network?

A. Site-to-Site VPN
B. Azure Front Door
C. Express Route
D. Point-to-Site VPN

正解：C

解説：
To establish a fast and secure private connection between multiple on-premises or shared infrastructures with Azure virtual private network, Curtis Morgan should opt for Azure ExpressRoute.
* Azure ExpressRoute: ExpressRoute allows you to extend your on-premises networks into the Microsoft cloud over a private connection facilitated by a connectivity provider1. With ExpressRoute, you can establish connections to Microsoft cloud services, such as Microsoft Azure and Office 365.
* Benefits of ExpressRoute:
* Private Connection: ExpressRoute connections do not go over the public Internet. This provides more reliability, faster speeds, lower latencies, and higher security than typical connections over the Internet1.
* Speed: ExpressRoute provides a fast and reliable connection to Azure with bandwidths up to 100 Gbps, which is suitable for high-throughput scenarios like disaster recovery, data migration, and high-traffic applications1.
* Security: The private nature of ExpressRoute connections ensures that sensitive data does not travel over the public Internet, reducing exposure to potential interceptions or attacks.
* Why Not the Others?:
* Site-to-Site VPN: While it also creates a secure connection to Azure, it uses the public Internet
* which may not provide the same level of performance and security as ExpressRoute.
* Azure Front Door: This service offers a scalable and secure entry point for fast delivery of your global applications but is not designed for creating private connections.
* Point-to-Site VPN: This type of VPN connection is used to connect individual devices to Azure over the Internet, not multiple on-premises infrastructures.
References:
* Azure Virtual Network - Virtual Private Cloud1.

質問 # 70
Global CloudEnv is a cloud service provider that provides various cloud-based services to cloud consumers.
The cloud service provider adheres to the framework that can be used as a tool to systematically assess cloud implementation by providing guidance on the security controls that should be implemented by specific actors within the cloud supply chain. It is used as the standard to assess the security posture of organizations on the Security, Trust, Assurance, and Risk (STAR) registry. Based on the given information, which of the following cybersecurity control frameworks does Global CloudEnv adhere to?