CCSP Exam Questions

Which of the following pertains to fire safety standards within a data center, specifically with their enormous electrical consumption?

Which of the following roles involves the connection and integration of existing systems and services to a cloud environment?

Which technique involves replacing values within a specific data field to protect sensitive data?

What expectation of data custodians is made much more challenging by a cloud implementation, especially with PaaS or SaaS?

What type of PII is controlled based on laws and carries legal penalties for noncompliance with requirements?

Which if the following is NOT one of the three components of a federated identity system transaction?

Which value refers to the amount of time it takes to recover operations in a BCDR situation to meet management's objectives?

Which of the cloud deployment models requires the cloud customer to be part of a specific group or organization in order to host cloud services within it?

What provides the information to an application to make decisions about the authorization level appropriate when granting access?

What is a standard configuration and policy set that is applied to systems and virtual machines called?

Which entity requires all collection and storing of data on their citizens to be done on hardware that resides within their borders?

Which of the cloud cross-cutting aspects relates to the ability to easily move services and applications between different cloud providers?

Which type of audit report is considered a "restricted use" report for its intended audience?

What is the concept of segregating information or processes, within the same system or application, for security reasons?

The European Union passed the first major regulation declaring data privacy to be a human right. In what year did it go into effect?

Which of the following is NOT a key area for performance monitoring as far as an SLA is concerned?

Which of the following is the MOST important requirement and guidance for testing during an audit?

Which value refers to the amount of data an organization would need to recover in the event of a BCDR situation in order to reach an acceptable level of operations?

What must SOAP rely on for security?

Which of the following is a commonly used tool for maintaining system configurations?

What type of data does data rights management (DRM) protect?

Which of the following is a valid risk management metric?

From a security perspective, which of the following is a major concern when evaluating possible BCDR solutions?

Which of the following is NOT a focus or consideration of an internal audit?

Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?

What process is used within a clustered system to provide high availability and load balancing?

Which of the following is NOT a function performed by the handshake protocol of TLS?

Unlike SOC Type 1 reports, which are based on a specific point in time, SOC Type 2 reports are done over a period of time. What is the minimum span of time for a SOC Type 2 report?

What changes are necessary to application code in order to implement DNSSEC?

Which type of controls are the SOC Type 1 reports specifically focused on?

Which security concept is based on preventing unauthorized access to data while also ensuring that it is accessible to those authorized to use it?

Which of the following is NOT a domain of the Cloud Controls Matrix (CCM)?

Which security concept, if implemented correctly, will protect the data on a system, even if a malicious actor gains access to the actual system?

Which of the following is the sole responsibility of the cloud provider, regardless of which cloud model is used?

Which of the following is NOT a factor that is part of a firewall configuration?

Which of the cloud deployment models involves spanning multiple cloud environments or a mix of cloud hosting models?

Which of the following is NOT one of five principles of SOC Type 2 audits?

Which aspect of cloud computing makes data classification even more vital than in a traditional data center?

What concept does the "T" represent in the STRIDE threat model?

Which of the following would be a reason to undertake a BCDR test?

What is the biggest challenge to data discovery in a cloud environment?

What is the Cloud Security Alliance Cloud Controls Matrix (CCM)?

Which of the following should NOT be part of the requirement analysis phase of the software development lifecycle?

Which of the cloud cross-cutting aspects relates to the assigning of jobs, tasks, and roles, as well as to ensuring they are successful and properly performed?

Which regulatory system pertains to the protection of healthcare data?

Which aspect of cloud computing makes it very difficult to perform repeat audits over time to track changes and compliance?

Which security concept would business continuity and disaster recovery fall under?

Which of the following is NOT an application or utility to apply and enforce baselines on a system?

Which of the cloud cross-cutting aspects relates to the ability for a cloud customer to easily remove their applications and data from a cloud environment?

Which of the following is NOT a function performed by the record protocol of TLS?