Câu 33: CAS-002: CompTIA Advanced Security Practitioner (CASP)

A company is in the process of outsourcing its customer relationship management system to a cloud provider. It will host the entire organizations customer database. The database will be accessed by both the companys users and its customers. The procurement department has asked what security activities must be performed for the deal to proceed. Which of the following are the MOST appropriate security activities to be performed as part of due diligence? (Select TWO).

1. A. Physical penetration test of the datacenter to ensure there are appropriate controls.
2. B. Penetration testing of the solution to ensure that the customer data is well protected.
3. C. Security clauses are implemented into the contract such as the right to audit. — đáp án hiện tại
4. D. Review of the organizations security policies, procedures and relevant hosting certifications. — đáp án hiện tại
5. E. Code review of the solution to ensure that there are no back doors located in the software.