Domain 3 Answers and Explanations

1. B. Ralph should use encryption to protect the data and then store the encryption keys in a location other than the cloud service. With this control in place, a rogue employee of the cloud service may be able to access the organization's data, but will not be able to decrypt it. The other controls listed here are all good security practices, but an insider may be able to bypass them.
2. A. In a type 1 hypervisor, the hypervisor runs directly on the system hardware, eliminating the need for an underlying operating system and reducing the environment's attack surface. Type 2 hypervisors require the use of a host operating system. Type 3 and 4 hypervisors do not exist.
3. C. ASHRE recommends that data centers maintain temperatures within the range of 64.4 and 80.6 degrees Fahrenheit and keep relative humidity between 8% and 80%.
4. C. RAID level 5 is also known as disk striping with parity. This approach requires a minimum of two disks...