ISA 3.0 ICAI QUESTION BANK

Question explanation : Option d – Microsoft Power BI
Microsoft Power BI is a predominantly a Data Analytics Platform. Watson, Tensor Flow and AWS AI are AI Platforms.

Question explanation : Option b – Big Data
Big Data refers to huge and voluminous data characterised by volume, variety and velocity. Machine Leaning, Speech recognition and NLP are streams in AI.

Question explanation : Option c – IaaS
Private, Public and Hybrid are cloud deployment models. IaaS is a Cloud Service Model as per NIST categorisation.

Question explanation : Option a – Simulation
Predictive Analytics analyses the past behaviour and makes predictions about the future to identify the new trends. Simulation is one such technique used in predictive analytics. Graphical reports and statistical analysis are more commonly associated with historical / descriptive analytics. Machine Leaning is used in Cognitive analytics.

Question explanation : Option b – Data Lake

Data Lake is a central storage for all kinds of structured, semi structured or unstructured raw data collected from multiple sources even outside of company’s operational systems.

Question explanation : Option b – Data Mining
Data mining refers to a method where companies analyze customer data or other types of information in an effort to identify patterns and discover relationships between different data elements.

Question explanation : Option b – Descriptive Analytics
Descriptive analytics is a preliminary stage of data processing that creates a summary of historical data to yield useful information and possibly prepare the data for further analysis.

Question explanation : Option b - Internet of things
The internet of things, or IoT, is a system of interrelated computing devices, mechanical and digital machines, objects, animals or people that are provided with unique identifiers (UIDs) and the ability to transfer data over a network without requiring human-to-human or human-to-computer interaction.

Question explanation : Option a - It is walking talking robot
RPA is not a walking talking robot. It is instead a computer coded software, that replace human repetitive tasks which can perform in cross functional platforms.

Question explanation : Option d – Data Cleaning
Data Cleaning is not an activity within RPA. Preparation of project, Development of business cases and Implementation of RPA are steps within the RPA project.

Question explanation :  Option a - A distributed ledger on a peer to peer network
Blockchain is a distributed ledger on a peer to peer network.

Question explanation : Option b – Peer to Peer
P2P stands for Peer to Peer Technology where every participant acts as an individual peer in the network.

Question Explanation
The correct answer is option 4, i.e. Power Center Robotic Process Automation is the technology that allows anyone today to configure computer software, or a “robot” to emulate and integrate the actions of a human interacting within digital systems to execute a business process. RPA robots utilize the user interface to capture data and manipulate applications just like humans do. They interpret, trigger responses and communicate with other systems in order to perform on a vast variety of repetitive tasks. Only substantially better: an RPA software robot never sleeps, makes zero mistakes and costs a lot less than an employee. There are numerous RPA tools (software) available in market such as, UiPath, Blue Prism, Pega, OpenConnect, Automation Anywhere, etc. Power Center is not the RPA software.

Question Explanation
P2P stands for Peer to Peer Technology where every participant acts as an individual peer in the network

Question Explanation
RPA is not a walking talking robot. It is instead a computer coded software; that replace human repetitive tasks which can perform in cross functional platforms

Question Explanation
Data Cleaning is not an activity within RPA. Preparation of project; Development of business cases and Implementation of RPA are steps within the RPA project

Question Explanation
Big Data refers to huge and voluminous data characterised by volume; variety and velocity. Machine Leaning; Speech recognition and NLP are streams in AI.

Question Explanation
Answer: B. Zigbee is designed for this type of low-power, Internet of Things network, and would be the best option for Chris. Some versions of Bluetooth are designed to operate in low-power mode as well, but Bluetooth isn’t in this list of answers. WiFi requires more power, NFC is very short range and would not work across a building or room, and infrared requires line of sight and is rarely used for that reason.

Question Explanation
The Internet of things (IoT) is a system of interrelated computing devices, mechanical and digital machines provided with unique identifiers (UIDs) and the ability to transfer data over a network without requiring human-to-human or human-to-computer interaction. Data storage, privacy and security are the major concern in IoT Throughput is not one of the concerns in IoT.

Question Explanation
In an Internet of Things (IoT) ecosystem, two things are very important: The Internet and physical devices like sensors and actuators. The bottom layer of the IoT system consists of sensor connectivity and network to collect information. The main purpose of sensors is to collect data from the surrounding environment. Sensors, or ‘things’ of the IoT system, form the front end. These are connected directly or indirectly to IoT networks after signal conversion and processing.

Question Explanation
The Internet of things (IoT) is a system of interrelated computing devices, mechanical and digital machines provided with unique identifiers (UIDs) and the ability to transfer data over a network without requiring human-to-human or human-to-computer interaction. IoT system architecture, consists of devices, the Edge Gateway, and the Cloud. The lowest layer is made up of smart objects integrated with sensors. The sensors enable the interconnection of the physical and digital worlds allowing real-time information to be collected and processed. There are various types of sensors for different purposes. The sensors have the capacity to take measurements such as temperature, air quality, speed, humidity, pressure, flow, movement and electricity etc. Notes: No, of layers in IoT architecture might be different based on different Authors

Question Explanation
Answer: D. The image shown is from a network connected web camera. This is likely an Internet of Things (IoT) botnet, much like the Mirai botnet that had a major impact on world internet traffic in 2016.

Question Explanation
Answer: D. Mirai targeted “Internet of Things” devices, including routers, cameras, and DVRs. As organizations bring an increasing number of devices like these into their corporate networks, protecting both internal and external targets from insecure, infrequently updated, and often vulnerable IoT devices is increasingly important.

Question Explanation
The internet of things; or IoT; is a system of interrelated computing devices; mechanical and digital machines; objects; animals or people that are provided with unique identifiers (UIDs) and the ability to transfer data over a network without requiring human-tohuman or human-to-computer interaction.

Question Explanation
Internet of things devices are remotely controllable. Devices in IoT are programmable Devices in IoT are automatic, that is, if devices are not doing any task it may turn of automatically

Question Explanation
Explanation:
User spool limits restrict the space available for running user queries. This prevents poorly formed queries from consuming excessive system resources and impacting general query performance. Limiting the space available to users in their own databases prevents them from building excessively large tables. This helps to control space utilization which itself acts to help performance by maintaining a buffer between the actual data volume stored and the physical device capacity. Additionally, it prevents users from consuming excessive resources in ad hoc table builds (as opposed to scheduled production loads that often can run overnight and are optimized for performance purposes), in a data warehouse, since you are not running online transactions, commitment and rollback does not have an impact on performance. The other choices are not as likely to be the root cause of this performance issue.

Question Explanation
Answer: D. All of these technologies have the potential to monitor user behavior on endpoint devices. The key to answering this question correctly is realizing the emphasis on the user. Intrusion detection and prevention systems (IDSs/IPSs) focus on network and host behavior. Endpoint detection and response (EDR) systems focus on endpoint devices. User and entity behavior analytics (UEBA) solutions focus on the user and, therefore, would be the best way to meet Hunter’s requirement.

Question Explanation
Explanation: The quality of the metadata produced from a data warehouse is the most important consideration in the warehouse’s design.

Question Explanation
Explanation: The most important factor to be considered when setting up a customer data warehouse in an offshore location is to determine the impact of privacy laws. Privacy law may restrict the movement of data to an offshore location. Other factors are not as significant as legal or regulatory requirements

Question Explanation
Predictive Analytics analyses the past behaviour and makes predictions about the future to identify the new trends. Simulation is one such technique used in predictive analytics. Graphical reports and statistical analysis are more commonly associated with historical / descriptive analytics. Machine Leaning is used in Cognitive analytics.

Question Explanation
Choice a, c, d are types of business analytics by definition. Hence Choice b is the correct answer.

Question Explanation
Data Mining refers to the automated extraction of hidden predictive information. TheKEY Aspect is detection of hidden information which helps predict the future through identification of patterns; etc.. Hence; only Option B is correct.

Question Explanation
Explanation:
Quality of the metadata is the most important element in the design of a data warehouse. A data warehouse is a copy of transaction data specifically structured for query and analysis. Metadata aim to provide a table of contents to the information stored in the data warehouse. Companies that have built warehouses believe that metadata are the most important component of the warehouse.

Question Explanation
Explanation:
Privacy laws prohibiting the cross-border flow of personally identifiable information would make it impossible to locate a data warehouse containing customer information in another country. Time zone differences and higher telecommunications costs are more manageable. Software development typically requires more detailed specifications when dealing with offshore operations.

Question Explanation
A is correct – IS Auditor should consider the following while auditing data warehouse:1. Credibility of the source data2. Accuracy of the source data3. Complexity of the source data structure4. Accuracy of extraction and transformation process5. Access control rules6. Network capacity for speedy access B is incorrect – IS Auditors role with respect to Decision Support System:1. Credibility of the source data2. Accuracy of the source data3. Accuracy of extraction and transformation process4. Accuracy and correctness of the output generated5. Access control rulesC is incorrect – The IS Auditors role with respect to EFT will be with respect to:1. Authorisation of payment.2. Validation of receivers details; for correctness and completeness.3. Verifying the payment made.4. Getting acknowledgement from the receiver; or alternatively from bank about the payment made.5. Checking whether the obligation against which the payment was made has been fulfilled. D is incorrect – IS Auditors role for PoS systems:1. In case there is batch processing; the IS auditor should evaluate the batch controls implemented by the organization.

Question Explanation
Microsoft Power BI is a predominantly a Data Analytics Platform. Watson; Tensor Flow and AWS AI are AI Platforms.

Question Explanation
Hadoop is an open source platform providing highly reliable, scalable, distributed processing of large data sets using simple programming models. Hadoop provides a reliable shared storage and analysis system. In this, storage is provided by HDFS (Hadoop distributed file system) and analysis by MapReduce. HDFS breaks a file into chunks and distributed them across the nodes of the cluster. It stores large amount of data on local disks across a distributed cluster of computers. It is written in java. Hadoop work with the tools: Map Reduce, H base, hive. Hbase: It is a distributed, column- oriented database. HBase uses HDFS for its underlying storage and supports both batch style computations using Map Reduce and point queries. Map Reduce: A distributed data processing model and execution environment that runs on large clusters of commodity machines. Hive: It is a distributed data warehouse. Hive manages data stored in HDFS and provides a query language based on SQL.

Question Explanation
Answer: A. Key risk indicators (KRIs) are often used to monitor risk for organizations that establish an ongoing risk management program. Using automated data gathering and tools that allow data to be digested and summarized can provide predictive information about how organizational risks are changing. KPIs are key performance indicators, which are used to assess how an organization is performing. Quantitative risk assessments are good for point-in-time views with detailed valuation and measurement-based risk assessments, whereas a penetration test would provide details of how well an organization’s security controls are working.

Question Explanation
Explanation:
Choice A specifically addresses the question of sensitive data by controlling what information users can access. Column-level security prevents users from seeing one or more attributes on a table. With row-level security a certain grouping of information on a table is restricted; e.g., if a table held details of employee salaries, then a restriction could be put in place to ensure that, unless specifically authorized, users could not view the salaries of executive staff. Column- and row-level security can be achieved in a relational database by allowing users to access logical representations of data rather than physical tables. This ‘fine-grained’ security model is likely to offer the best balance between information protection while still supporting a wide range of analytical and reporting uses. Enhancing user authentication via strong passwords is a security control that should apply to all users of the data warehouse and does not specifically address protection of sensitive datA. Organizing a data warehouse into subject-specific databases is a potentially useful practice but, in itself, does not adequately protect sensitive datA. Database-level security is normally too ‘coarse’ a level to efficiently and effectively protect information. For example, one database may hold information that needs to be restricted such as employee salary and customer profitability details while other information such as employee department may need to be legitimately

Question Explanation
A data warehouse is a centralized analytically oriented; integrated; time-oriented & non-volatile collection of data. It relates to all areas of operations which have relevance to business goals. Hence; only Option C is correct.

Question Explanation
Explanation:
DSS emphasizes flexibility in the decision making approach of users. It is aimed at solving less structured problems, combines the use of models and analytic techniques with traditional data but this is not the primary reason. Unit and system testing are completed before parallel testing. Program interfaces with files are tested for errors during system testing.

Explanation: The first step will be determining the objectives and the scope of analytics followed by Option C, Option B, and Option A.

Question Explanation
Descriptive analytics is a preliminary stage of data processing that creates a summary of historical data to yield useful information and possibly prepare the data for further analysis

Question Explanation
A. Data Mining refers to ‘Discovery of hidden patterns in the large data to find some valuable information’. – B. Data Warehousing refers to central repositories of integrated data from one or more disparate sources., C. Data Mart is a subset of thedata warehouse that is usually oriented to a specific business line or team. – D. A database is a collection of information that is organized so that it can easily be accessed, managed, and updated.

Question Explanation
Data Lake is a central storage for all kinds of structured; semi structured or unstructured raw data collected from multiple sources even outside of company’s operational systems.

Question Explanation
A Data Mart is a subset of a Data Warehouse & contains detailed data about a single aspect of business in large companies. Hence; only Option A is correct.

Question Explanation
Purpose of Data warehouse is to take business decisions and frame future policies based on the analysis of transactional data. It cannot act as an alternative to backup. Purpose of the data ware house is not for business continuity nor is it for regulatory requirements.

Question Explanation
Explanation:
Accuracy of source data is a prerequisite for the quality of the data in a data warehouse. Credibility of the data source, accurate extraction processes and accurate transformation routines are all important, but would not change inaccurate data intoquality (accurate) data.

Question Explanation
Explanation:
Once the data is in a warehouse, no modifications should be made to it and access controls should be in place to prevent data modification. Increased response time on the production systems is not a risk, because a data warehouse does not impact production datA. Based on data replication, data duplication is inherent in a data warehouse. Transformation of data from operational systems to a data warehouse is done at predefined intervals, and as such, data may not be current.

Question Explanation
Explanation: The most important considerations are legal requirements, laws, and regulations. Other options are also important but option (B) should be considered as the most important clause in a contract with a cloud service provider.

Question Explanation
Explanation: Considering various laws and regulations that require the privacy/confidentiality of customer information, unauthorized access to information and data leakage are the major concerns.

Question Explanation
Explanation: It is very important that contracts should have proper clarification with respect to data ownership, data custody, and other IPR-related requirements

Question Explanation
Explanation: It is very important to validate and verify whether the regulations of the locations (where infrastructure is located) are aligned with the enterprises requirements. The contract should include terms to restrict the movement of assets to within approved locations. Other options are also important but option (D) should be considered as th

Question Explanation
Explanation: The best way to ensure is to obtain and verify an independent security review or audit report of the CSP. Other options are not sufficient in themselves to verify physical security arrangements.

Question Explanation
Answer: D Identity as a Service typically indicates that the directory database is cloud-based and managed by a cloud service provider. Though the organization can host its own directory service, it is less likely to use IdaaS if storing the database on the internal network.

Question Explanation
Answer: Answer A IaaS stands for Infrastructure as a Service and provides cloud-based access to routers, switches, servers, storage and other elements necessary to support a network infrastructure.

Question Explanation
Answer: B. Identity as a service (IDaaS) provides capabilities such as account provisioning, management, authentication,
authorization, reporting, and monitoring. Platform as a service (PaaS), infrastructure as a service (IaaS), and software as a service (SaaS).

Question Explanation
Answer: C. A cloud IaaS vendor will allow Kristen to set up infrastructure as quickly as she can deploy and pay for it. A PaaS vendor provides a platform that would require her to migrate her custom application to it, likely taking longer than a hosted data center provider. A data center vendor that provides rack, power, and remote hands assistance fails the test based on Kristen’s desire to not have to acquire or ship hardware.

Question Explanation
Answer: C. One of the core capabilities of infrastructure as a service is providing servers on a vendormanaged virtualization platform. Web-based payroll and email systems are examples of software as a service. An application platform managed by a vendor that runs customer code is an example of platform as a service.

Question Explanation
Answer: D. The cloud service offerings in order from the case where the customer bears the least responsibility to where the customer bears the most responsibility are SaaS, PaaS, and IaaS. In an infrastructure as a service (IaaS) cloud computing model, the customer retains responsibility for managing operating system and application security, while the vendor manages security at the hypervisor level and below. In a platform as a service (PaaS) environment, the vendor takes on responsibility for the operating system, but the customer writes and configures any applications. In a software as a service (SaaS) environment, the vendor takes on responsibility for the development and implementation of the application while the customer merely configures security settings within the application.

Question Explanation
Answer: B. This is an example of function as a service (FaaS) computing. However, FaaS is not listed as an answer choice, so you must also know that FaaS is a subcategory of platform as a service (PaaS) computing to answer this question correctly. This model does not necessarily take advantage of containerization. The cloud provider is managing the infrastructure and only making the platform available to customers, so it is not infrastructure as a service (IaaS). The customers are running their own code, so it is not software as a service (SaaS).

Question Explanation
Answer: A. In an IaaS server environment, the customer retains responsibility for most server security operations under the shared responsibility model. This includes managing OS security settings, maintaining host firewalls, and configuring server access control. The vendor would be responsible for all security mechanisms at the hypervisor layer and below.

Question Explanation
Answer: A. Identity as a service (IDaaS) provides an identity platform as a third-party service. This can provide benefits, including integration with cloud services and removing overhead for maintenance of traditional on-premises identity systems, but can also create risk due to third- party control of identity services and reliance on an off-site identity infrastructure

Question Explanation
Answer: B. Storage is an infrastructure component and, therefore, an object storage service is an example of an infrastructure as a service (IaaS) cloud service. Software as a service (SaaS) models provide full applications managed by the provider. Platform as a service (PaaS) and function as a service (FaaS) approaches allow developers to run their own code on an infrastructure platform managed by the provider.

Question Explanation
Answer: C. In a platform as a service solution, the customer supplies application code that the vendor then executes on its own infrastructure.

Question Explanation
Answer: D. In a software as a service solution, the vendor manages both the physical infrastructure and the complete application stack, providing the customer with access to a fully managed application.

Question Explanation
Answer: C. In an infrastructure as a service environment, the vendor is responsible for hardware- and network-related
responsibilities. These include configuring network firewalls, maintaining the hypervisor, and managing physical equipment. The customer retains responsibility for patching operating systems on its virtual machine instances

Question Explanation
Answer: A. IDaaS, or identity as a service, provides an identity platform as a third-party service. This can provide benefits including integration with cloud services and removing overhead for maintenance of traditional on-premises identity systems, but it can also create risk due to third-party control of identity services and reliance on an off-site identity infrastructure.

Question Explanation
Answer: B. Since Jim’s organization is using a cloud-based identity as a service solution, a third-party, on-premises identity service can provide the ability to integrate with the IDaaS solution, and the company’s use of Active Directory is widely supported by thirdparty vendors. OAuth is used to log in to third-party websites using existing credentials and would not meet the needs described. SAML is a markup language and would not meet the full set of AAA needs. Since the organization is using Active Directory, a custom in-house solution is unlikely to be as effective as a preexisting third-party solution and may take far more time and expense to implement.

Question Explanation
Answer: D. In an infrastructure as a service (IaaS) environment, the company that provides cloud environment has final control of all the virtual machines and networks. Thus, to protect data, the best option is to encrypt the data. Unfortunately, Ben cannot fully ensure that traffic in his environment is not being captured and must rely on the cloud hosting provider for that assurance. While preventing the installation of packet sniffers and taps and ensuring that promiscuous mode cannot be enabled are useful habits in an environment that you control, this will not provide the same control in a cloud environment.

Question Explanation
Answer: C. ICMP, RIP, and network address translation all occur at layer 3, the Network layer.

Question Explanation
Answer: B. Cloud computing systems where the customer only provides application code for execution on a vendor-supplied computing platform are examples of platform as a service (PaaS) computing.

Question Explanation
Answer: B. In a software as a service environment, the customer has no access to any underlying infrastructure, so firewall
management is a vendor responsibility under the cloud computing shared responsibility model.

Question Explanation
Answer: D. In an infrastructure as a service environment, security duties follow a shared responsibility model. Since the vendor is responsible for managing the storage hardware, the vendor would retain responsibility for destroying or wiping drives as they are taken out of service. However, it is still the customer’s responsibility to validate that the vendor’s sanitization procedures meet their requirements prior to utilizing the vendor’s storage services.

Question Explanation
Answer: A. This is an example of a vendor offering a fully functional application as a web-based service. Therefore, it fits under the definition of software as a service (SaaS). In infrastructure as a service (IaaS), compute as a servi ce (CaaS), and platform as a service (PaaS) approaches, the customer provides their own software. In this example, the vendor is providing the email software, so none of those choices is appropriate

Question Explanation
Explanation: The private cloud is considered the most secure deployment method.

Question Explanation
Private; Public and Hybrid are cloud deployment models. IaaS is a Cloud Service Model as per NIST categorisation.

Question Explanation
The Iaas model involves provision of processing; storage networks & other basic computing resources as brought out in Option A. Hence; the other options are incorrect.

Question Explanation
Option D above captures the correct services offered by SaaS; the other options are incorrect.

Question Explanation
Option A above captures the correct services offered by PaaS; the other options are incorrect.

Question Explanation
Option A above captures the correct services offered by PaaS; the other options are incorrect.

Question Explanation
The correct answer is option 3. Key Points Naas(network as a service) has a feature of remote access through which a customer can access the data from anywhere and at any time with the help of an internet connection. Additional Information Customers may use NaaS to gain direct and safe access to the internet. It also helps consumers to use their own routing protocols. The NaaS offers network access to the user using a virtualized network. The consumer gains from this feature because they don’t have to maintain or think about infrastructure and can just concentrate on increasing their business.

Question Explanation
Cloud Computing is primarily broadly categorized as: 1. Infrastructure-as-a-Service. 2. Platform-as-a-Service. 3. Software-as-a- Service. Infrastructure as a service (IaaS) is a type of cloud computing service that offers essential compute, storage and networking resources on demand, on a pay-as-you-go basis. Software as a service (SaaS) is a software distribution model in which a cloud provider hosts applications and makes them available to end users over the internet. Cloud platform services, also known as Platform as a Service (PaaS), provide cloud components to certain software while being used mainly for applications. Big data as a service (BDaaS) is the delivery of data platforms and tools by a cloud provider to help organizations process.

Question Explanation
The correct answer is option 2, i.e. Platform as a Service. Cloud platform services, also known as Platform as a Service (PaaS), provide cloud components to certain software while being used mainly for applications. PaaS delivers a framework for developers that they can build upon and use to create customized applications. All servers, storage, and networking can be managed by the enterprise or a third-party provider while the developers can maintain management of the applications. Examples: AWS Elastic Beanstalk, Windows Azure, Heroku, Force.com, Google App Engine, Apache Stratos, OpenShift

Question Explanation
A. In Software as a Service, one uses service provider’s application/software on cloud infrastructure. – B. In Platform as a Service,
one uses service provider’s basic computing infrastructure along with OS and Database Support. However, application software has to be managed by the user., C. In Infrastructure as a Service, cloud service provider provides with basic computing infrastructure only. – D. Cloud as a Service is not a cloud service model.

Question Explanation
A. Infrastructure as a Service is one of the cloud service model. – B. Software as a Service is one of the cloud service model., C. Platform as a Service is one of the cloud service model. – D. Protocol as a Service is not a cloud service model.

Question Explanation
Answer: D. In a serverless computing model, the vendor does not expose details of the operating system to its customers. Therefore, the vendor retains full responsibility for configuring it securely under the shared responsibility model of cloud computing.

Question Explanation
The answers in Options B to D would act; by and large; counter to the goals of Green information technology. Though it may appear worthwhile continuing to sweat equipment are generally more energy efficient and can more than compensate the benefits of retaining the old equipment. Moving to cloud computing helps improve resources; similarly; a single server system is probably more energy efficient than multiple servers. The answer in Option A; however; is relevant & will make a mea the goals of Green IT. Hence; onlyOption A is the correct answer

Question Explanation
The answers in Options A; B and D would act; by and large; counter to the goals of Green information technology. Moving to cloud computing helps improved utilis similarly; a single server system is probably more energy efficient than multiple servers. Though it may appear worthwhile continuing to sweat old equipment; new e more energy efficient and can more than compensate the benefits of retaining the old equipment. The answer in Option C; however; is relevant & will make a meanin goals of Green IT. Hence; only Option C isthe correct answer.

Question Explanation
The odd one out Twitter Platoform Key Points Amazon Web Services (AWS) It is a subsidiary of Amazon providing on-demand cloud computing platforms and APIs to individuals, companies, and governments, on a metered pay-as-you-go basis. Microsoft Azure It is a cloud computing service created by Microsoft for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. Google Cloud Platform Google Cloud Platform, offered by Google, is a suite of cloud computing services that runs on the same infrastructure that Google uses internally for its end-user products, such as Google Search, Gmail, file storage, and YouTube. Twitter Platform It is an American microblogging and social networking service on which users post and interact with messages known as “tweets”

Question Explanation
The Back-end in Cloud computing comprises the various computers; servers & datastorage systems in the cloud system. Hence; Option B is correct whereas the other options are incorrect.

Question Explanation
The Front-end in Cloud computing comprises the Client’s computer as well as the software required to access the cloud. Hence; Option D is correct whereas the otheroptions are incorrect.

Question Explanation
The answers in Options B to D would act; by and large; counter to the goals of Green information technology. Moving to cloud computing helps improved utilisation of resources; similarly; a single server system is probably more energy efficient than multiple servers. Though it may appear worthwhile continuing to sweat old equipment; new equipment are generally more energy efficient and can more than compensate for the benefits of retaining the old equipment. The answer in Option A; however; is relevant & will make

Question Explanation
Answer: C. A software-defined wide area network, or SD-WAN, is commonly used to manage multiple ISPs and other connectivity options to ensure speed, reliability, and bandwidth design goals are all met. Ben can use SD-WAN capabilities to accomplish his goals to make his hybrid cloud environment successful. Fibre Channel over Ethernet (FCoE) is a storage protocol; VXLAN is used for extensible virtual LANs, not WANs; and LiFi uses visible and infrared light to transfer data.

Question Explanation
Answer: A. In the public cloud computing model, the vendor builds a single platform that is shared among many different customers. This is also known as the shared tenancy model

Question Explanation
A. Google encompasses many aspects beyond just a Community Cloud – B. Google provides its services world-wide and hence not a Private Cloud., C. Google is the example of Public Cloud. – D. Google provides its services world-wide and hence not a Private Cloud.

Question Explanation
Answer: B. In the private cloud computing model, the cloud computing environment is dedicated to a single organization and does not follow the shared tenancy model. The environment may be built by the company in its own data center or built by a vendor at a co-location site.

Question Explanation
Option B, Explanation: When drawing up a contract with a cloud service provider, the ideal practice is to remove the customer lockin clause. It may be important for the client to secure portability of their system assets, i.e., the right to transfer from one vendor to another.

Question Explanation
While outsourcing IT operations to cloud service provider the most important consideration would be to maintain ownership of information. It has to be contracted by means of an SLA. Options b, c or d are other considerations but most important is Option a and hence it is the correct answer.

Cloud computing refers to on demand; networked access to a shared pool of computing resources as indicated in Option A. It is generally offered as a utility to users; payableon the basis of consumption. Hence Option A is correct & the other options incorrect.

Question Explanation
Answer: A. This is an example of a microservices architecture. Each of the component microservices performs a discrete task and then communicates with other microservices using APIs. This might be accomplished using FaaS cloud computing, containerization, and/or virtualization, but there is no indication whether those services are being used in the scenario.

Question Explanation
In the given instance; the client is being offered measured services & on-demand self service as brought out in Option C. The example does not throw up any specific facility for accessing the cloud through any device other than the laptop being used. It does not also speak of other Cloudcomputing services like access to software;

Question Explanation
Cloud computing basically involves pooling of resources for use by multiple agencies featuring the various attributes listed in Options B to D. Option A alone doesn’t fall within the typical features of cloud computing since it speaks simply of a internal computing facility which happens to be located at a remote site. Hence; Option C iscorrect whereas the other options are incorrect.

Question Explanation
Hybrid Cloud computing provides both private & public computing services; as indicated in Option D. Hence; the other options are incorrect.

Question Explanation
The answers in Options A; B and D would act; by and large; counter to the goals of Green information technology. Moving to cloud computing helps improved utilis similarly; a single server system is probably more energy efficient than multiple servers. Though it may appear worthwhile continuing to sweat old equipment; new e more energy efficient and can more than compensate the benefits of retaining the old equipment. The answer in Option C; however; is relevant & will make a meanin goals of Green IT. Hence; only Option C isthe correct answer.

Question Explanation
Answer: A. This diagram shows an example of hybrid federation where authentication occurs onpremises and services are provided through a federated identity service in the cloud.

Answer: B. Integration with cloud-based third parties that rely on local authentication can fail if the local organization’s internet connectivity or servers are offline. Adopting a hybrid cloud and local authentication system can ensure that internet or server outages are handled, allowing authentication to work regardless of where the user is or if their home organization is online. Using encrypted and signed communication does not address availability, redirects are a configuration issue with the third party, and a local gateway won’t handle remote users. Also, host files don’t help with availability issues with services other than DNS.

Question Explanation
Answer: B Though Cloud-based solutions provide centralized management and ease administration of users and accounts, CSPs (Cloud Service Providers) are not regulated and not required to provide the degree of security your company may need. Obtaining a well-written contract and auditing that contract are two ways to ensure your company’s security requirements are met.

Question Explanation
Answer: C. Hybrid systems use both on-premises and cloud identity and services to provide resources and tools in both
environments. While they can be complex, hybrid systems also provide a migration path to a fully cloud deployment or for a fault tolerant design that can handle on- premises or cloud outages while remaining functional

Question Explanation
Answer: D. The scenario describes a mix of public cloud and private cloud services. This is an example of a hybrid cloud
environment.

Question Explanation
Answer: C. A hybrid authentication service can provide authentication services both in the cloud and on-premises, ensuring that service outages due to interrupted links are minimized. An on-site service would continue to work during an internet outage but would not allow the e-commerce website to authenticate. A cloud service would leave the corporate location offline. Outsourcing authentication does not indicate whether the solution is on- or off-premises and thus isn’t a useful answer.

Question Explanation
Options at A;C & D are incorrect; cloud computing should actually help reduce costs; improve competitive advantage & not lead to increased manpower requirements. However; to the extent one is forced to use a third party cloud computing service; the client’s dependency increases with consequent risk perception. Hence; Option B aloneis correct.

Question Explanation
Answer: Answer B One of the big benefits of a cloud infrastructure is the elasticity it offers. Elasticity is the degree to which systems are able to adapt to changes in workload by provisioning and de-provisioning needed resources automatically so that each time the available resources match the current demand as closely as is possible.

Question Explanation

Answer: B. In this case, most cloud service models (including IaaS, SaaS, and serverless/FaaS) would require transmitting most information back to the cloud. The edge computing service model would be far more appropriate, as it places computing power at the sensor, minimizing the data that must be sent back to the cloud over limited connectivity network links.

Question Explanation
When several businesses share a common cloud computing resource; it is called acommunity cloud facility. Hence; Option C is correct whereas the other options are

Question Explanation
Answer: Answer D In a community cloud deployments, storage is usually provided to clients of the same or similar industries that require the same security implementations, usually due to compliance issues. In this case, there is likely a cloud service provider that houses medical information from other healthcare providers or others required to maintain HIPAA compliance. This solution will most likely be cheaper and easier to manage than hosting their own private cloud

Question Explanation
Microsoft Azure is a cloud computing service created by Microsoft for building, deploying, and managing applications and services through a global network of Microsoft-managed data centers.

Question Explanation
Answer: Answer C One of the main benefits of thin clients is that the responsibility is taken off the client for the installation, upgrades, and management of resources. A central computer hosts the software and services and the clients access these services. The client can contain very minimum hardware/software, as the services are actually running on the server, whether it be a local server or a server accessed through a cloud service provider’s network.

Question Explanation
Answer: B. A cloud access security broker is a tool that sits between on-premises and cloud systems, monitoring traffic and enforcing security policies. This scenario exactly matches what a CASB is designed to do. The other answers were made up; none of these is an actual cloud security device or tool (at least as of the writing of this book!).

Question Explanation
Answer: B. The best option for Nadia is a cloud access security broker (CASB). A CASB is designed to sit between a cloud
environment and the users who use it, and it provides monitoring and policy enforcement capabilities. A next-generation firewall (NGFW), an intrusion detection system (IDS), and a security operations and response (SOAR) tool could each provide some insight into what is going on, but they are not purpose built and designed for this like the CASB is. The NGFW and IDS are most likely to provide insight into traffic patterns and behaviors, while the SOAR is primarily intended to monitor other systems and centralize data for response, making it potentially the least useful in this specific scenario.

Question Explanation
Answer: B. BitTorrent is an example of a peer-to-peer (P2P) content delivery network. It is commonly used for legitimate purposes to distribute large files like Linux ISOs and other freely distributed software packages and files in addition to its less legitimate uses. CloudFlare, CloudFront, and Akamai’s Edge are all hosted CDNs.

Question Explanation
Concept: Bitcoin script is a simple Forth-like stack-based language, which in simple terms means that it operates using a first-in-lastout principle (FILO) stack-based data structure. Bitcoin Script (also known as Bitcoin Scripting Language or Script) is a simple, stack-based programming language that enables the processing of transactions on the Bitcoin blockchain. Stack-based Bitcoin: Script uses a data structure that can be thought of as a linear structure represented by a physical stack or pile. Hence the correct answer is stack-based. Additional Information Turing-complete language (also called a universal language) is one where you can compute anything that any other computational method can compute. Bitcoin scripting language varies according to the scripting technology implemented. For example, the scripting language used in Bitcoin is intentionally designed as Turing Incomplete because it serves its purpose and increased complexity would potentially introduce problems. Bitcoin scripting language supports finite time and Zero memory. You really need no memory at all to «store 1 bitcoin». It’s because all the data on the blockchain lives on the blockchain

Question Explanation
Correct Option is 3). Key Points Bitcoin (?) is a decentralized digital currency, without a central bank or single administrator, that can be sent from user to user on the peer-to-peer bitcoin network without the need for intermediaries. Transactions are verified by network nodes through cryptography and recorded in a public distributed ledger called a blockchain. The cryptocurrency was invented in 2008 by an unknown person or group of people using the name Satoshi Nakamoto. The currency began to use in 2009 when its implementation was released as open-source software.

Question Explanation
The correct answer is option (3) Concept:- Blockchain is a distributed, unchangeable ledger that makes recording transactions and managing assets in a corporate network much easier. There are four main types of blockchain networks: Public blockchain network Private blockchain network Consortium blockchain network Hybrid blockchain network Key Points A private blockchain is a blockchain network that operates in a restricted context, such as a closed network, or is controlled by a single entity. Anyone with internet access can sign on to a blockchain platform to become an authorized node, and a public blockchain is non-restrictive and permissionless. Real estate is one of the many compelling use cases for hybrid blockchain. Companies can utilize a hybrid blockchain to run systems securely while exposing certain information to the public, such as listings. The fourth form of blockchain, known as a federated blockchain, is similar to a hybrid blockchain in that it combines private and public blockchain capabilities.

Question Explanation
Concept: A blockchain is “a distributed database that maintains a continuously growing list of ordered records, called blocks.” These blocks “are linked using cryptography. Each block contains, A cryptographic hash of the previous block, A timestamp, and Transaction data. Hence the correct answer is only I, ii, and iii. Additional Information A blockchain is a decentralized, distributed, and public digital ledger that is used to record transactions across many computers so that the record cannot be altered retroactively without the alteration of all subsequent blocks and the consensus of the network. The blocks created by various miners are chained together to form what is known as a truly distributed public.

Question Explanation
A blockchain is a growing list of records, called blocks, that are linked using cryptography. Each block contains a cryptographic hash of the previous block a timestamp, and transaction data. A blockchain is resistant to modification of the data. It is “an open, distributed ledger that can record transactions between two parties efficiently and in a verifiable and permanent way.”

Question Explanation
Correct Option is 2). In the blockchain, a fork is defined variously as: What happens when a blockchain diverges into two potential paths forward. a change in protocol or. a situation that “occurs when two or more blocks have the same block height”. Additional Information The decentralized nature of public blockchains (for example, Bitcoin and Ethereum) means that participants on the network must be able to come to an agreement as to the shared state of the blockchain(shared public ledger and blocks and the blockchain protocol). The unanimous consensus amongst the network nodes results in a single blockchain that contains verified data(transactions) that the network asserts to be correct. However, many times, the nodes in the network can’t come to a unanimous consensus regarding the future state of the blockchain. This event leads to forks (like a tuning fork used in experimental science), meaning that point in which the ideal ‘single’ chain of blocks is split into two or more chains which are all valid. Types of Fork:- Soft Fork: when the blockchain protocol is altered in a backward-compatible way. Hard Fork: when the blockchain protocol is altered in a non-backward-compatible way. Temporary Fork: when two miners mine a new block at the same time.

Question Explanation
A distributed ledger on a peer to peer network. Blockchain is a distributed ledger on a peer to peer network

Question Explanation
Key Points Blockchain is a distributed ledger where data can be stored securely such that any alteration in the data is not possible. The technology behind Bitcoins is the Blockchain Network. Following are the components of a Blockchain network. Node: It is of two types. Full Node and Partial Node. Full Node: It maintains a full copy of all the transactions. Partial Node: It is also called a Lightweight Node because it doesn’t maintain the whole copy of the blockchain ledger Ledger: It is a digital database of information. Here, we have used the term ‘digital’ because the currency exchanged between different nodes is digital i.e cryptocurrency. There are three types of the ledger. Public Ledger, Distributed Ledger, and Decentralized Ledger. Wallet: It is a digital wallet that allows user to store their cryptocurrency. Every node in the blockchain network has a Wallet. Cryptocurrency wallets are mainly of two types are Hot wallets and Cold wallets. Nonce: A nonce is an abbreviation for “number only used once,” which is a number added to a hashed or encrypted block in a blockchain. Hash: The data is mapped to a fixed size using hashing. It plays a very important role in cryptography. Hence the correct answer is the certificate authority.

Question Explanation
Explanation Business Intelligence Systems help management to analyze, evaluate and help take strategic decisions. Although b, c, d also support decision making a is most appropriate answer.

Question Explanation
A. Data Analysis is not the precise term that is used for the given question. – B. CAAT Tools are the tools to perform many functions over and above transforming raw data into meaningful and useful information for business purpose., C. Artificial Intelligence is not related to the matter given in the question. – D. Business Intelligence is a set of methodologies that transform raw data into meaningful and useful information for business purpose.

Question Explanation
The correct answer is option 4. Concept: Blockchain technology: Blockchain is a method of storing data in such a manner that it is difficult or impossible to alter, hack, or defraud it. A blockchain is a digital log of transactions that is copied and distributed throughout the blockchain’s complete network of computer systems. Three pillars of blockchain: Decentralization: The actual definition of decentralization is the absence of a central authority. If we apply this notion to Blockchain, it indicates that the network is self-governing and does not have a central authority. Transparency: In real life, transparency refers to anything that has no opacity. When we apply this notion to Blockchain, it means that there is no privacy. To be more specific, when it comes to transactions, all transactions are public and can be read by everyone on the network. Immutability: Immutable implies precisely what it sounds like in real life: something that cannot be changed. When we talk about blockchain, we’re referring to the fact that once a transaction is published into the system, it can’t be changed. Hence the correct answer is All of the Above.

Question Explanation
The correct answer is option 4. Concept: Blockchain technology: Blockchain is a method of storing information in such a way that it is difficult or impossible to edit, hack, or trick the system. A blockchain is simply a digital record of transactions that is replicated and distributed throughout the blockchain’s complete network of computer systems. Benefits of blockchain technology: Enhanced Security. Enhanced Speed. Fraud control & Access levels. No hidden fees. Better Transparency. True Traceability. Improved Speed and Highly Efficient. Hence the correct answer is All of the Above.

Question Explanation
Data mining refers to a method where companies analyze customer data or other types of information in an effort to identify patterns and discover relationships between different data elements.

Question Explanation
Option A is the correct answer. Data mining is a set of automated tools that convert data in the warehouse to some useful information. Data mining techniques could also be used for fraud detection, intrusion detection, abnormal patterns in data. Data optimisation tools improves performance of the database. Data access as the name suggests helps in accessing the right data. Data reorganisation tools helps relocate the data for faster access

Question Explanation
Explanation: Data mining is a technique used to detect trends or patterns of transactions or datA. If the historical pattern of charges against a credit card account is changed, then it is a flag that the transaction may have resulted from a fraudulent use of the card.

Question Explanation
Answer: D. Neural networks attempt to use complex computational techniques to model the behavior of the human mind. Knowledge b systems, which are designed to capture and reapply human knowledge. Decision support systems are designed to provide advice to thos and are often driven by expert systems

Question Explanation
Answer: A. While any cybersecurity activity has the potential to benefit from machine learning and artificial intelligence capabilities, the for pattern detection and anomaly detection problems. This is the type of activity performed by an intrusion detection system, and, there most from the use of ML/AI technology.

Question Explanation
Explanation: Neural networks work on the same principle as statistical-based IDS. However, they possess the advanced functionality of updating the database by monitoring the general pattern of activities. Neural networks are most effective in addressing problems that re of input variables.

Question Explanation
Explanation: Neural networks work on the same principle as statistical-based IDS. However, they possess the advanced functionality of updating the database by monitoring the general pattern of activities.

Question Explanation
Neural networks can be used to attack problems that require consideration of numerous input variables. They are capable of capturing r by other statistical methods; and they will not discover new trends. Neural networks are inherently nonlinear and make no assumption a variables to the output. Neural networks will not work well at solving problems for which sufficiently large and general sets of training

Question Explanation
Cognitive Science. This is an area based on research in disciplines such as biology; neurology; psychology; mathematics and allied disc brain works and how humans think and learn. Applications of AI in the cognitive science are Expert Systems; Learning Systems; Neura Fuzzy Logic. B; C and D are incorrect. B. Robotics: This technology produces robot machines with computer intelligence and human-li includes applications that give robots visual perception; capabilities to feel by touch; dexterity and locomotion. C. Natural Languages: B computers in human languages is the goal of research in this area. Interactive voice response and natural programming languages; close the applications. D. Virtual reality is another important application that can be classified under natural interfaces.

Question Explanation
Key Points Reinforcement learning is a machine learning training method based on rewarding desired behaviors and/or punishing under learning agent is able to perceive and interpret its environment, take actions and learn through trial and error. Reinforcement learning al applications and gaming applications. The main used algorithms are: Q-Learning: Q-learning is an Off policy RL algorithm, which is us Hence the correct answer is Q-learning. Additional Information Naive Bayes classification is a form of supervised learning. It is consid Bayes classifiers are trained using labeled data. Principal Component Analysis (PCA) is an unsupervised, non-parametric statistical tech dimensionality reduction in machine learning. Fast Forest Quantile Regression keeps all the predicted labels in trees specified by the pa outputs the distribution so that the user can view the quantile values for the given instance.

Question Explanation
The correct answer is John McCarthy. Key Points John McCarthy: He was an American mathematician and computer scientist who was intelligence (AI); his main research in the field involved the formalization of common-sense knowledge. McCarthy coined the term arti created the computer programming language LISP in 1958. LISP was initially used primarily by the AI community owing to its great f Artificial Intelligence (AI): It is the theory and development of computer systems able to perform tasks normally requiring human Intelligence speech recognition, decision-making, and translation between languages.

Question Explanation
The correct answer is option 4. Key Points Heuristic search is a search technique that seeks to solve a problem by iteratively enhancing or a cost analysis. Heuristic search is two types. Direct Heuristic Search Techniques in AI( Breadth-First Search (BFS) and Depth First Search Techniques in AI (Best-First Search, A* Search, etc) Every AI program has to do the process of searching for the solution steps to knowledge plays a vital role in intelligence as well as creating artificial intelligence. ∴ Hence the incorrect statement is It works on implements repetition mechanism

Question Explanation
Explanation: Neural networks are effective in detecting fraud because they have the capability to consider a large number of variables

Question Explanation
Explanation:
A neural network will monitor and learn patterns, reporting exceptions for investigation.

Question Explanation
The correct answer is option 4. Key PointsVirtualization uses software to create an abstraction layer over computer hardware that allows the hardware elements of a single computer processor, memory, storage, and more to be divided into multiple virtual computers, commonly called virtual machines (VMs). Each VM runs its own operating system (OS) and behaves like an independent computer, even though it is running on just a portion of the actual underlying computer hardware. It is a technology that lets you create useful IT services using resources that are traditionally bound to hardware. It allows you to use a physical machine’s full capacity by distributing its capabilities among many users or environments. It’s the same hardware, you’re just using more of it more efficiently. Hence the correct answer is Virtualization. Additional Information A storage area network (SAN) is a dedicated, independent high-speed network that interconnects and delivers shared pools of storage devices to multiple servers. Each server can access shared storage as if it were a drive directly attached to the server. Each switch and storage system on the SAN must be interconnected. Clustering is the task of dividing the population or data points into a number of groups such that data points in the same groups are more similar to other data points in the same group than those in other groups. In simple words, the aim is to segregate groups with similar traits and assign them into clusters. Artificial intelligence (AI) is the ability of a computer or a robot controlled by a computer to do tasks that are usually done by humans because they require human intelligence and discernment.

Question Explanation
The correct answer is “option 4”. CONCEPT: According to computer science, Artificial Intelligence is the study of “intelligent agents” or “rational agents and their environment”. Agent: Agent is those that work or act in their environment. Environment: It is the surrounding of an agent. An agent takes input from the environment through sensors & delivers the output to the environment through actuators. EXPLANATION: option1: Simple reflex agent acts on the basis of current percept and ignores percept history i.e. all the history an agent has perceived till date. option2: Model-based agents have a model i.e. knowledge about how things happen in the whole world & based on the model it performs actions. option3: Learning agents learn from past experiences and automatically adapt through learning. It has learning capabilities. option4: Utility-based agents choose actions on the basis of utilities or preference and chooses the actions that maximize the expected utility. Utility describes the happiness of the agent. Hence, Utilitybased agents deal with happy & unhappy agents. Additional Information 1. Sensors are used to detect any type of change in the environment & inform other electronic devices. 2. Actuators convert energy into motion & are responsible for the movement of the system. 3. Rational agent acts in a way that improves the performance measure with any possible actions.

Question Explanation
Prolong is a general-purpose programming language associated with artificial intelligence and computational linguistics.

Question Explanation
The word-processing software pops up suggested words based upon the first few words keyed in by the user. Also; when the user keys in a new word which is not available in its repertoire; it adds it to its collection & reflects it as an option the next time similar letters are initiated. In effect; the software is able to observe & record patterns and improves through ‘learning’. The other answers in Options B to D involve the basic computing functions of a computer which are based on a ‘go / no-go’ logic which does not involve  pattern recognition or further learning. Hence; the correct answer is only as in Option A which displays characteristics of artificial intelligence.

Question Explanation
:Fifth generation programming language is the most advanced of the languages & is used in artificial intelligence. It is; thus; not based upon primitive machine language and code. It is also pre-programmed with options in such a way that minimum intervention of a programmer is required. It is much simpler and platform independent as compared to first generation programming languages (options A; C & D).

Question Explanation
Artificial intelligence works with the help of Artificial neurons as also ‘If-then’ statements/logics. The answers in the other options are no correct. Hence; the correct answer is only as in Option A.