CCSP Exam Questions

What concept does the "R" represent with the DREAD model?

The SOC Type 2 reports are divided into five principles. Which of the five principles must also be included when auditing any of the other four principles?

How many additional DNS queries are needed when DNSSEC integrity checks are added?

Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?

Which of the following service categories entails the least amount of support needed on the part of the cloud customer?

Which of the following would NOT be a reason to activate a BCDR strategy?

Which of the cloud cross-cutting aspects relates to the oversight of processes and systems, as well as to ensuring their compliance with specific policies and regulations?

Which of the cloud cross-cutting aspects relates to the ability to reuse or move components of an application or service?

Which of the following is a restriction that can be enforced by information rights management (IRM) that is not possible for traditional file system controls?

What strategy involves hiding data in a data set to prevent someone from identifying specific individuals based on other data fields present?

What type of security threat is DNSSEC designed to prevent?

Which European Union directive pertains to personal data privacy and an individual's control over their personal data?

Which of the cloud cross-cutting aspects relates to the requirements placed on a system or application by law, policy, or requirements from standards?

Which data point that auditors always desire is very difficult to provide within a cloud environment?

What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?

Which security concept is focused on the trustworthiness of data?

Which OSI layer does IPsec operate at?

Which of the cloud cross-cutting aspects relates to the requirements placed on the cloud provider by the cloud customer for minimum performance standards and requirements that must...

Which of the following service capabilities gives the cloud customer the most control over resources and configurations?

What concept does the "I" represent with the STRIDE threat model?

At which stage of the BCDR plan creation phase should security be included in discussions?

Which approach is typically the most efficient method to use for data discovery?

Which of the following features is a main benefit of PaaS over IaaS?

Which audit type has been largely replaced by newer approaches since 2011?

Which of the following can be useful for protecting cloud customers from a denial-of-service (DoS) attack against another customer hosted in the same cloud?

Which of the following service capabilities gives the cloud customer the least amount of control over configurations and deployments?

What does the "SOC" acronym refer to with audit reports?

What does the REST API use to protect data transmissions?

What strategy involves replacing sensitive data with opaque values, usually with a means of mapping it back to the original value?

With software-defined networking, what aspect of networking is abstracted from the forwarding of traffic?

Which of the following does NOT fall under the "IT" aspect of quality of service (QoS)?

What does dynamic application security testing (DAST) NOT entail?

Where is an XML firewall most commonly deployed in the environment?

What type of masking strategy involves replacing data on a system while it passes between the data and application layers?

Which of the following is a widely used tool for code development, branching, and collaboration?

Which aspect of security is DNSSEC designed to ensure?

Which process serves to prove the identity and credentials of a user requesting access to an application or data?

Who would be responsible for implementing IPsec to secure communications for an application?

What is the minimum regularity for testing a BCDR plan to meet best practices?

Other than cost savings realized due to measured service, what is another facet of cloud computing that will typically save substantial costs in time and money for an organization...

Which of the following is NOT part of a retention policy?

Which aspect of cloud computing would make the use of a cloud the most attractive as a BCDR solution?

Which of the cloud deployment models offers the easiest initial setup and access for the cloud customer?

Which of the following is NOT something that an HIDS will monitor?

Which of the following technologies is used to monitor network traffic and notify if any potential threats or attacks are noticed?

What concept does the "A" represent in the DREAD model?

Which attribute of data poses the biggest challenge for data discovery?

What does static application security testing (SAST) offer as a tool to the testers?

Which of the following service capabilities gives the cloud customer an established and maintained framework to deploy code and applications?

What process is used within a cloud environment to maintain resource balancing and ensure that resources are available where and when needed?