CCSP Exam Questions

Which aspect of SaaS will alleviate much of the time and energy organizations spend on compliance (specifically baselines)?

Many tools and technologies are available for securing or monitoring data in transit within a data center, whether it is a traditional data center or a cloud. Which of the followin...

With a federated identity system, where would a user perform their authentication when requesting services or application access?

Where is an XML firewall most commonly and effectively deployed in the environment?

Modern web service systems are designed for high availability and resiliency. Which concept pertains to the ability to detect problems within a system, environment, or application...

On large distributed systems with pooled resources, cloud computing relies on extensive orchestration to maintain the environment and the constant provisioning of resources. Which...

BCDR strategies do not typically involve the entire operations of an organization, but only those deemed critical to their business. Which concept pertains to the amount of service...

During the course of an audit, which of the following would NOT be an input into the control requirements used as part of a gap analysis.

The GAPP framework was developed through a joint effort between the major Canadian and American professional accounting associations in order to assist their members with managing...

Which protocol operates at the network layer and provides for full point-to-point encryption of all communications and transmissions?

When data discovery is undertaken, three main approaches or strategies are commonly used to determine what the type of data, its format, and composition are for the purposes of cla...

There are many situations when testing a BCDR plan is appropriate or mandated. Which of the following would not be a necessary time to test a BCDR plan?

Key maintenance and security are paramount within a cloud environment due to the widespread use of encryption for both data and transmissions. Which of the following key-management...

Security is a critical yet often overlooked consideration for BCDR planning. At which stage of the planning process should security be involved?

Which type of testing uses the same strategies and toolsets that hackers would use?

Which of the following statements about Type 1 hypervisors is true?

Which format is the most commonly used standard for exchanging information within a federated identity system?

Which ITIL component is focused on anticipating predictable problems and ensuring that configurations and operations are in place to prevent these problems from ever occurring?

Which of the following areas of responsibility would be shared between the cloud customer and cloud provider within the Software as a Service (SaaS) category?

When a system needs to be exposed to the public Internet, what type of secure system would be used to perform only the desired operations?

With the rapid emergence of cloud computing, very few regulations were in place that pertained to it specifically, and organizations often had to resort to using a collection of re...

Which of the following is NOT considered a type of data loss?

Which of the following jurisdictions lacks a comprehensive national policy on data privacy and the protection of personally identifiable information (PII)?

Which component of ITIL involves planning for the restoration of services after an unexpected outage or incident?

Which component of ITIL pertains to planning, coordinating, executing, and validating changes and rollouts to production environments?

What process entails taking sensitive data and removing the indirect identifiers from each data object so that the identification of a single entity would not be possible?

Because cloud providers will not give detailed information out about their infrastructures and practices to the general public, they will often use established auditing reports to...

Which of the following concepts is NOT one of the core components to an encryption system architecture?

For optimal security, trust zones are used for network segmentation and isolation. They allow for the separation of various systems and tiers, each with its own security level. Whi...

Which of the following is NOT a major regulatory framework?

As part of the auditing process, getting a report on the deviations between intended configurations and actual policy is often crucial for an organization. What term pertains to th...

An audit scope statement defines the limits and outcomes from an audit. Which of the following would NOT be included as part of an audit scope statement?

What concept and operational process must be spelled out clearly, as far as roles and responsibilities go, between the cloud provider and cloud customer for the mitigation of any p...

Your new CISO is placing increased importance and focus on regulatory compliance as your applications and systems move into cloud environments. Which of the following would NOT be...

Cloud systems are increasingly used for BCDR solutions for organizations. What aspect of cloud computing makes their use for BCDR the most attractive?

What's a potential problem when object storage versus volume storage is used within IaaS for application use and dependency?

Many aspects of cloud computing bring enormous benefits over a traditional data center, but also introduce new challenges unique to cloud computing. Which of the following aspects...

Without the extensive funds of a large corporation, a small-sized company could gain considerable and cost-effective services for which of the following concepts by moving to a clo...

BCDR strategies typically do not involve the entire operations of an organization, but only those deemed critical to their business. Which concept pertains to the amount of data an...

Which of the following is NOT a commonly used communications method within cloud environments to secure data in transit?

Which crucial aspect of cloud computing can be most threatened by insecure APIs?

The WS-Security standards are built around all of the following standards except which one?

Which protocol, as a part of TLS, handles negotiating and establishing a connection between two parties?

BCDR strategies typically do not involve the entire operations of an organization, but only those deemed critical to their business. Which concept pertains to the required amount o...

Your company is in the planning stages of moving applications that have large data sets to a cloud environment. What strategy for data removal would be the MOST appropriate for you...

Which of the following is a management role, versus a technical role, as it pertains to data management and oversight?

IRM solutions allow an organization to place different restrictions on data usage than would otherwise be possible through traditional security controls. Which of the following con...

Which data protection strategy would be useful for a situation where the ability to remove sensitive data from a set is needed, but a requirement to retain the ability to map back...

A comprehensive BCDR plan will encapsulate many or most of the traditional concerns of operating a system in any data center. However, what is one consideration that is often overl...

Which of the following is NOT one of the components of multifactor authentication?