CCSP Exam Questions

You are working for a cloud service provider and receive an eDiscovery order pertaining to one of your customers. Which of the following would be the most appropriate action to tak...

If a cloud computing customer wishes to guarantee that a minimum level of resources will always be available, which of the following set of services would compromise the reservatio...

Which of the following threat types can occur when baselines are not appropriately applied or when unauthorized changes are made?

Which of the following is considered an internal redundancy for a data center?

Which of the following threat types involves the sending of invalid and manipulated requests through a user's client to execute commands on the application under their own credenti...

With finite resources available within a cloud, even the largest cloud providers will at times need to determine which customers will receive additional resources first. What is th...

In order to comply with regulatory requirements, which of the following secure erasure methods would be available to a cloud customer using volume storage within the IaaS service m...

Where is a DLP solution generally installed when utilized for monitoring data in use?

Which of the following aspects of cloud computing would make it more likely that a cloud provider would be unwilling to satisfy specific certification requirements?

Which phase of the cloud data lifecycle would be the MOST appropriate for the use of DLP technologies to protect the data?

During which phase of the cloud data lifecycle is it possible for the classification of data to change?

If a key feature of cloud computing that your organization desires is the ability to scale and expand without limit or concern about available resources, which cloud deployment mod...

What is a serious complication an organization faces from the compliance perspective with international operations?

ISO/IEC has established international standards for many aspects of computing and any processes or procedures related to information technology. Which ISO/IEC standard has been est...

If a company needed to guarantee through contract and SLAs that a cloud provider would always have available sufficient resources to start their services and provide a certain leve...

Many aspects and features of cloud computing can make eDiscovery compliance more difficult or costly. Which aspect of cloud computing would be the MOST complicating factor?

A crucial decision any company must make is in regard to where it hosts the data systems it depends on. A debate exists as to whether it's best to lease space in a data center or b...

Which of the following systems is used to employ a variety of different techniques to discover and alert on threats and potential threats to systems and networks?

Which is the lowest level of the CSA STAR program?

In order to ensure ongoing compliance with regulatory requirements, which phase of the cloud data lifecycle must be tested regularly?

Which of the following threat types involves leveraging a user's browser to send untrusted data to be executed with legitimate access via the user's valid credentials?

Digital investigations have adopted many of the same methodologies and protocols as other types of criminal or scientific inquiries. What term pertains to the application of scient...

Within a federated identity system, which entity accepts tokens from the identity provider?

Different types of audits are intended for different audiences, such as internal, external, regulatory, and so on. Which of the following audits are considered "restricted use" ver...

Although host-based and network-based IDSs perform similar functions and have similar capabilities, which of the following is an advantage of a network-based IDS over a host-based...

DNSSEC was designed to add a layer of security to the DNS protocol. Which type of attack was the DNSSEC extension designed to mitigate?

Which aspect of cloud computing pertains to cloud customers only paying for the resources and services they actually use?

Many of the traditional concepts of systems and services for a traditional data center also apply to the cloud. Both are built around key computing concepts. Which of the following...

With a cloud service category where the cloud customer is provided a full application framework into which to deploy their code and services, which storage types are MOST likely to...

Firewalls are used to provide network security throughout an enterprise and to control what information can be accessed--and to a certain extent, through what means. Which of the f...

Within an IaaS implementation, which of the following would NOT be a metric used to quantify service charges for the cloud customer?

Many different common threats exist against web-exposed services and applications. One attack involves attempting to leverage input fields to execute queries in a nested fashion th...

For service provisioning and support, what is the ideal amount of interaction between a cloud customer and cloud provider?

What does a cloud customer purchase or obtain from a cloud provider?

Which phase of the cloud data lifecycle represents the first instance where security controls can be implemented?

You were recently hired as a project manager at a major university to implement cloud services for the academic and administrative systems. Because the load and demand for services...

Which cloud deployment model is MOST likely to offer free or very cheap services to users?

Where is a DLP solution generally installed when utilized for monitoring data in transit?

With IaaS, what is responsible for handling the security and control over the volume storage space?

Configurations and policies for a system can come from a variety of sources and take a variety of formats. Which concept pertains to the application of a set of configurations and...

Which of the following tasks within a SaaS environment would NOT be something the cloud customer would be responsible for?

An SLA contains the official requirements for contract performance and satisfaction between the cloud provider and cloud customer. Which of the following would NOT be a component w...

Within a federated identity system, which of the following would you be MOST likely to use for sending information for consumption by a relying party?

Which data state would be most likely to use digital signatures as a security protection mechanism?

There is a large gap between the privacy laws of the United States and those of the European Union. Bridging this gap is necessary for American companies to do business with Europe...

Audits are either done based on the status of a system or application at a specific time or done as a study over a period of time that takes into account changes and processes. Whi...

With software-defined networking (SDN), which two types of network operations are segregated to allow for granularity and delegation of administrative access and functions?

Along with humidity, temperature is crucial to a data center for optimal operations and protection of equipment. Which of the following is the optimal temperature range as set by A...

Which of the following statements best describes a Type 1 hypervisor?

Which cloud storage type resembles a virtual hard drive and can be utilized in the same manner and with the same type of features and capabilities?