Appendix A. Answers

Chapter 1

1. b. A third-party connection agreement (TCA) is a document that spells out exactly the security measures that should be taken with respect to the handling of data exchanged between the parties. This document should be executed in any instance where a partnership involves depending on another entity to secure company data.

2. b. There is a trade-off when a decision must be made between the two architectures. A private solution provides the most control over the safety of your data but also requires staff and knowledge to deploy, manage, and secure the solution.

3. c. A community cloud is shared by organizations that are addressing a common need, such as regulatory compliance. Such shared clouds may be managed by ...

Get CompTIA Advanced Security Practitioner (CASP) CAS-003 Cert Guide, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.