Which item is metadata rather than the underlying business transaction itself?
A. The cash amount received from a customer
B. The quantity shipped on an invoice
C. A field definition stating that invoice_date uses YYYY-MM-DD and records shipment date
D. The customer's actual payment
Source: Section 3, data life-cycle and metadata functions in the reference architecture -- https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.1500-1r2.pdf
Which infrastructure component provides the core software layer that manages hardware resources and supplies services to application programs?
A. Operating system
B. Load balancer
C. Database record
D. Network firewall
Source: Definitions: operating system; NIST SP 800-44 Version 2 source -- https://csrc.nist.gov/glossary/term/operating_system
Which security objective is principally affected by a distributed denial-of-service attack that overwhelms a public website?
A. Confidentiality
B. Data minimization
C. Nonrepudiation
D. Availability
Source: Section 3.2.1 and incident categories, denial of service -- https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
What is the principal role of a hypervisor?
A. Convert relational tables into flat files
B. Create and manage isolated virtual machines on physical computing resources
C. Encrypt every application record with a separate key
D. Replace the need for an operating system inside a virtual machine
Source: Section 2.1, Full Virtualization Technologies -- https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-125.pdf
Under a typical infrastructure-as-a-service arrangement, which component does the cloud customer ordinarily manage?
A. Physical data-center building
B. Physical host hardware
C. Guest operating system and deployed applications
D. Hypervisor firmware
Source: Section 2, Software, Platform, and Infrastructure as a Service definitions -- https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-145.pdf
