BCS CISMP-V9 Exam Questions - Navigate Your Path to Success

Correct : A

In the context of cloud delivery models, the term ''trusted'' typically refers to the level of security control and assurance that clients can expect. Among the options provided, thePubliccloud delivery model is generally considered to be the least ''trusted'' in terms of security by clients using the service. This is because public clouds are shared environments where the infrastructure and services are owned and operated by a third-party provider and shared among multiple tenants. The multi-tenant nature of public clouds can introduce risks such as data breaches or other security incidents that might not be as prevalent in more controlled environments.

In contrast,Privateclouds are dedicated to a single organization, providing more control over data, security, and compliance.Hybridclouds combine both public and private elements, offering a balance of control and flexibility.Communityclouds are shared between organizations with common goals and compliance requirements, offering a level of trust tailored to the group's needs.

Therefore, while all cloud models come with their own security considerations and potential risks, the public cloud model is typically the one where clients have to place more trust in the provider's security measures, as they have less control over the environment.

Correct : D

Anomaly-based intrusion detection systems (IDS) are particularly effective in detecting zero-day attacks because they do not rely on known signatures, which zero-day attacks would not have. Instead, they monitor network behavior for deviations from a baseline of normal activity.This approach can identify suspicious activities that could indicate a novel or unknown threat, such as a zero-day exploit12345.These systems use various methods, including machine learning and deep learning, to detect patterns that could signify an attack, making them a robust solution against the unpredictable nature of zero-day threats12345.