CCSP Exam Questions
876 real CCSP exam questions with expert-verified answers and explanations. Page 12 of 18.
- Question #560Cloud Security Operations
Which value refers to the percentage of production level restoration needed to meet BCDR objectives?
BCDR objectivesRecovery Service Level (RSL)Business ContinuityDisaster Recovery - Question #561Cloud Data Security
Over time, what is a primary concern for data archiving?
Data ArchivingData RecoveryLong-term storageData lifecycle management - Question #562Cloud Data Security
What is an often overlooked concept that is essential to protecting the confidentiality of data?
Security Awareness TrainingConfidentialityHuman FactorData Protection - Question #563Cloud Concepts, Architecture and Design
Which of the cloud deployment models offers the most control and input to the cloud customer as to how the overall cloud environment is implemented and configured?
Cloud deployment modelsPrivate cloudCustomer control - Question #564Cloud Concepts, Architecture and Design
What concept does the "D" represent with the STRIDE threat model?
STRIDE threat modelThreat modelingDenial of ServiceSecurity models - Question #565Cloud Concepts, Architecture and Design
Your boss has tasked your team with getting your legacy systems and applications connected with new cloud-based services that management has decided are crucial to customer service...
Cloud rolesCloud integrationHybrid cloud - Question #566Legal, Risk and Compliance
One of the main components of system audits is the ability to track changes over time and to match these changes with continued compliance and internal processes. Which aspect of c...
Cloud AuditingCompliance ChallengesVirtualization ImpactChange Tracking - Question #567Legal, Risk and Compliance
In the wake of many scandals with major corporations involving fraud and the deception of investors and regulators, which of the following laws was passed to govern accounting and...
Sarbanes-Oxley ActSOXFinancial RegulationsCorporate Governance - Question #568Cloud Application Security
Which one of the following threat types to applications and services involves the sending of requests that are invalid and manipulated through a user's client to execute commands o...
Cross-site Request Forgery (CSRF)Web Application SecurityApplication ThreatsClient-side Attacks - Question #569Cloud Concepts, Architecture and Design
Which cloud service category would be most ideal for a cloud customer that is developing software to test its applications among multiple hosting providers to determine the best op...
Cloud Service ModelsPaaSApplication DevelopmentCloud Use Cases - Question #570Cloud Data Security
You just hired an outside developer to modernize some applications with new web services and functionality. In order to implement a comprehensive test platform for validation, the...
Data MaskingStatic Data MaskingTest Data ManagementData Protection - Question #571Cloud Platform & Infrastructure Security
In order to prevent cloud customers from potentially consuming enormous amounts of resources within a cloud environment and thus having a negative impact on other customers, what c...
Resource ManagementMulti-tenancyResource LimitsCloud Governance - Question #572Cloud Data Security
Where is a DLP solution generally installed when utilized for monitoring data at rest?
DLP (Data Loss Prevention)Data at RestEndpoint SecuritySecurity Controls - Question #573Cloud Concepts, Architecture and Design
Which of the following aspects of security is solely the responsibility of the cloud provider?
Shared Responsibility ModelCloud Provider ResponsibilitiesPhysical SecuritySecurity of the Cloud - Question #574Cloud Platform & Infrastructure Security
Humidity levels for a data center are a prime concern for maintaining electrical and computing resources properly as well as ensuring that conditions are optimal for top performanc...
Data Center Environmental ControlsHumidity ManagementASHRAE StandardsPhysical Infrastructure Security - Question #575Cloud Concepts, Architecture and Design
Within a SaaS environment, what is the responsibility on the part of the cloud customer in regard to procuring the software used?
SaaS responsibilitiesShared responsibility modelCloud customer obligationsSoftware licensing - Question #576Cloud Platform & Infrastructure Security
Implementing baselines on systems would take an enormous amount of time and resources if the staff had to apply them to each server, and over time, it would be almost impossible to...
Configuration ManagementSecurity BaselinesAutomation ToolsEnterprise Systems Management - Question #577Legal, Risk and Compliance
From the perspective of compliance, what is the most important consideration when it comes to data center location?
JurisdictionData residencyComplianceData center location - Question #578Cloud Platform & Infrastructure Security
Different certifications and standards take different approaches to data center design and operations. Although many traditional approaches use a tiered methodology, which of the f...
Data Center StandardsData Center DesignIDCAUptime Institute - Question #579Legal, Risk and Compliance
The European Union is often considered the world leader in regard to the privacy of personal data and has declared privacy to be a "human right." In what year did the EU first asse...
EU Privacy LawData Protection HistoryHuman RightsCompliance - Question #580Cloud Data Security
A DLP solution/implementation has three main components. Which of the following is NOT one of the three main components?
DLPData Loss PreventionData Security Controls - Question #581Cloud Concepts, Architecture and Design
What type of storage structure does object storage employ to maintain files?
Object storageStorage architectureCloud storage types - Question #582Cloud Concepts, Architecture and Design
Which cloud storage type requires special consideration on the part of the cloud customer to ensure they do not program themselves into a vendor lock-in situation?
Cloud Storage TypesVendor Lock-inStructured DataData Portability - Question #583Cloud Concepts, Architecture and Design
Which cloud deployment model would be ideal for a group of universities looking to work together, where each university can gain benefits according to its specific needs?
Community CloudDeployment ModelsCloud Architecture - Question #584Cloud Platform & Infrastructure Security
Data centers have enormous power resources that are distributed and consumed throughout the entire facility. Which of the following standards pertains to the proper fire safety sta...
Data center securityPhysical securityFire safety standardsInfrastructure standards - Question #585Cloud Application Security
Which of the following threat types involves an application that does not validate authorization for portions of itself beyond when the user first enters it?
Application SecurityAccess ControlAuthorizationVulnerabilities - Question #586Cloud Concepts, Architecture and Design
Clustered systems can be used to ensure high availability and load balancing across individual systems through a variety of methodologies. What process is used within a clustered s...
Clustered SystemsHigh AvailabilityLoad BalancingResource Scheduling - Question #587Cloud Application Security
Although the REST API supports a wide variety of data formats for communications and exchange, which data formats are the most commonly used?
REST APIAPI Data FormatsXMLJSON - Question #588Cloud Data Security
The share phase of the cloud data lifecycle involves allowing data to leave the application, to be shared with external systems, services, or even other vendors/contractors. What t...
Cloud Data LifecycleData Loss Prevention (DLP)Data ProtectionData Sharing Security - Question #589Cloud Application Security
When an API is being leveraged, it will encapsulate its data for transmission back to the requesting party or service. What is the data encapsulation used with the SOAP protocol re...
API ConceptsSOAP ProtocolData EncapsulationWeb Service Protocols - Question #590Cloud Platform & Infrastructure Security
From a security perspective, what component of a cloud computing infrastructure represents the biggest concern?
Management plane securityCloud control planeInfrastructure security risksCloud architecture security - Question #591Cloud Data Security
Which of the following is NOT one of the main intended goals of a DLP solution?
DLPData Loss PreventionData SecuritySecurity Controls - Question #592Cloud Concepts, Architecture and Design
Data center and operations design traditionally takes a tiered, topological approach. Which of the following standards is focused on that approach and is prevalently used throughou...
Data Center DesignUptime InstituteTiered ArchitectureInfrastructure Standards - Question #593Legal, Risk and Compliance
Jurisdictions have a broad range of privacy requirements pertaining to the handling of personal data and information. Which jurisdiction requires all storage and processing of data...
Data ResidencyJurisdictional RequirementsPrivacy LawsCross-border Data Transfer - Question #594Cloud Concepts, Architecture and Design
The management plane is used to administer a cloud environment and perform administrative tasks across a variety of systems, but most specifically it's used with the hypervisors. W...
Cloud Management PlaneCloud OrchestrationAPIsCloud Architecture - Question #595Legal, Risk and Compliance
When dealing with PII, which category pertains to those requirements that can carry legal sanctions or penalties for failure to adequately safeguard the data and address compliance...
PII protectionData complianceRegulatory requirementsLegal sanctions - Question #596Legal, Risk and Compliance
Although the United States does not have a single, comprehensive privacy and regulatory framework, a number of specific regulations pertain to types of data or populations. Which o...
US Federal RegulationsCompliancePrivacy FrameworksIndustry Standards - Question #597Cloud Concepts, Architecture and Design
The president of your company has tasked you with implementing cloud services as the most efficient way of obtaining a robust disaster recovery configuration for your production se...
Cloud Deployment ModelsDisaster RecoveryHybrid CloudCloud Architecture - Question #598Cloud Concepts, Architecture and Design
If you are running an application that has strict legal requirements that the data cannot reside on systems that contain other applications or systems, which aspect of cloud comput...
MultitenancyCloud characteristicsIsolationCompliance considerations - Question #599Cloud Application Security
The REST API is a widely used standard for communications of web-based services between clients and the servers hosting them. Which protocol does the REST API depend on?
REST APIWeb servicesProtocolsHTTP - Question #600Cloud Data Security
Which of the following actions will NOT make data part of the create phase of the cloud data lifecycle?
Cloud Data LifecycleData CreationMetadata ManagementData States - Question #601Cloud Application Security
Most APIs will support a variety of different data formats or structures. However, the SOAP API will only support which one of the following data formats?
SOAP APIXML FormatAPI ProtocolsData Formats - Question #602Cloud Concepts, Architecture and Design
Which cloud storage type is typically used to house virtual machine images that are used throughout the environment?
Cloud StorageObject StorageVirtual Machine ImagesStorage Types - Question #603Cloud Application Security
With an API, various features and optimizations are highly desirable to scalability, reliability, and security. What does the REST API support that the SOAP API does NOT support?
REST APISOAP APIAPI CachingCloud API Security - Question #604Cloud Data Security
Although much of the attention given to data security is focused on keeping data private and only accessible by authorized individuals, of equal importance is the trustworthiness o...
Data integrityCIA triadInformation security principlesData trustworthiness - Question #605Legal, Risk and Compliance
Three central concepts define what type of data and information an organization is responsible for pertaining to eDiscovery. Which of the following are the three components that co...
eDiscoveryLegal holdData responsibilityRequired disclosure - Question #606Cloud Application Security
Which of the following threat types involves the sending of commands or arbitrary data through input fields in an application in an attempt to get that code executed as part of nor...
Injection attacksApplication securityVulnerabilities - Question #607Cloud Concepts, Architecture and Design
With a cloud service category where the cloud customer is responsible for deploying all services, systems, and components needed for their applications, which of the following stor...
IaaSCloud storageVolume storageObject storage - Question #608Cloud Concepts, Architecture and Design
Which of the following roles would be responsible for managing memberships in federations and the use and integration of federated services?
Cloud RolesFederated ServicesInter-cloudIdentity & Access Management - Question #609Cloud Data Security
Which data state would be most likely to use TLS as a protection mechanism?
TLSData StatesData in TransitNetwork Security