CCSP Exam Questions

Which of the following should occur at each stage of the SDLC?

Application virtualization can typically be used for ____________.

During which stage of the SDLC process should security be consulted and begin its initial involvement?

A firewall can use all of the following techniques for controlling traffic except:

Which of the following is not typically included as a basic phase of the software development life cycle?

Each of the following are dependencies that must be considered when reviewing the BIA after cloud migration except:

Which of the following practices can enhance both operational capabilities and configuration management efforts?

Which strategy involves using a fake production system to lure attackers in order to learn about their tactics?

The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, an organization th...

What does nonrepudiation mean?

Vulnerability scans are dependent on ________ in order to function.

Which concept pertains to cloud customers paying only for the resources they use and consume, and only for the duration they are using them?

Which of the following is a file server that provides data access to multiple, heterogeneous machines/users on the network?

What sort of legal enforcement may the Payment Card Industry (PCI) Security Standards Council not bring to bear against organizations that fail to comply with the Payment Card Indu...

DAST checks software functionality in ____________.

Who is the entity identified by personal data?

SOX was enacted because of which of the following?

Which of the following top security threats involves attempting to send invalid commands to an application in an attempt to get the application to execute the code?

Which of the following best describes SAML?

Using one cloud provider for your operational environment and another for your BCDR backup will also give you the additional benefit of ____________.

Heating, ventilation, and air conditioning (HVAC) systems cool the data center by pushing warm air into ____________.

You work for a government research facility. Your organization often shares data with other government research organizations. You would like to create a single sign-on experience...

You are the security policy lead for your organization, which is considering migrating from your on- premises, legacy environment into the cloud. You are reviewing the Cloud Securi...

Which of the following is the recommended operating range for temperature and humidity in a data center?

____________ can often be the result of inadvertent activity.

The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, what is one reason...

Which of the following storage types are used with an Infrastructure as a Service (IaaS) solution?

Which of the following management risks can make an organization's cloud environment unviable?

You are performing an audit of the security controls used in a cloud environment. Which of the following would best serve your purpose?

Which of the following is not a factor an organization might use in the cost-benefit analysis when deciding whether to migrate to a cloud environment?

A honeypot can be used for all the following purposes except ____________.

Which cloud service category offers the most customization options and control to the cloud customer?

A virtual network interface card (NIC) exists at layer __________ of the OSI model.

You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment. In order to increase the security value...

Static software security testing typically uses __________ as a measure of how thorough the testing was.

At which layer does the IPSec protocol operate to encrypt and protect communications between two parties?

Which of the following data sanitation methods would be the MOST effective if you needed to securely remove data as quickly as possible in a cloud environment?

Egress monitoring solutions usually include a function that ____________.

Which of the following is a method for apportioning resources that involves setting guaranteed minimums for all tenants/customers within the environment?

What can tokenization be used for?

Which phase of the cloud data lifecycle involves processing by a user or application?

_________ is the legal concept whereby a cloud customer is held to a reasonable expectation for providing security of its users' and clients' privacy data.

Which of the following is essential for getting full security value from your system baseline?

Log data should be protected ____________.

What is used with a single sign-on system for authentication after the identity provider has successfully authenticated a user?

In the cloud motif, the data processor is usually:

The Open Web Application Security Project (OWASP) Top Ten is a list of web application security threats that is composed by a member-driven OWASP committee of application developme...

You are in charge of creating the BCDR plan and procedures for your organization. Your organization has its production environment hosted by a cloud provider, and you have appropri...

The cloud deployment model that features organizational ownership of the hardware and infrastructure, and usage only by members of that organization, is known as:

When considering the option to migrate from an on-premises environment to a hosted cloud service, an organization should weigh the risks of allowing external entities to access the...