CCSP Exam Questions
876 real CCSP exam questions with expert-verified answers and explanations. Page 14 of 18.
- Question #660Legal, Risk and Compliance
Which aspect of SaaS will alleviate much of the time and energy organizations spend on compliance (specifically baselines)?
SaaS BenefitsCloud ComplianceStandardizationShared Responsibility - Question #661Cloud Data Security
Many tools and technologies are available for securing or monitoring data in transit within a data center, whether it is a traditional data center or a cloud. Which of the followin...
Data in Transit SecurityNetwork Security ProtocolsEncryptionCloud Security Controls - Question #662Cloud Concepts, Architecture and Design
With a federated identity system, where would a user perform their authentication when requesting services or application access?
Federated IdentityAuthenticationIdentity ManagementSingle Sign-On - Question #663Cloud Application Security
Where is an XML firewall most commonly and effectively deployed in the environment?
XML FirewallApplication SecurityWeb Services SecuritySecurity Architecture - Question #664Cloud Concepts, Architecture and Design
Modern web service systems are designed for high availability and resiliency. Which concept pertains to the ability to detect problems within a system, environment, or application...
Fault ToleranceHigh AvailabilityResiliencySystem Design - Question #665Cloud Concepts, Architecture and Design
On large distributed systems with pooled resources, cloud computing relies on extensive orchestration to maintain the environment and the constant provisioning of resources. Which...
Cloud NetworkingResource ProvisioningAutomationDHCP - Question #666Cloud Security Operations
BCDR strategies do not typically involve the entire operations of an organization, but only those deemed critical to their business. Which concept pertains to the amount of service...
BCDRRecovery Service LevelRSLCloud Resilience - Question #667Legal, Risk and Compliance
During the course of an audit, which of the following would NOT be an input into the control requirements used as part of a gap analysis.
AuditControl RequirementsGap AnalysisCompliance - Question #668Legal, Risk and Compliance
The GAPP framework was developed through a joint effort between the major Canadian and American professional accounting associations in order to assist their members with managing...
GAPPPrivacy FrameworksData PrivacyCompliance - Question #669Cloud Platform & Infrastructure Security
Which protocol operates at the network layer and provides for full point-to-point encryption of all communications and transmissions?
IPSecNetwork Layer SecurityEncryption ProtocolsVPN - Question #670Cloud Data Security
When data discovery is undertaken, three main approaches or strategies are commonly used to determine what the type of data, its format, and composition are for the purposes of cla...
Data DiscoveryData ClassificationContent AnalysisMetadata Analysis - Question #671Cloud Security Operations
There are many situations when testing a BCDR plan is appropriate or mandated. Which of the following would not be a necessary time to test a BCDR plan?
BCDR Plan TestingBusiness ContinuityDisaster RecoveryOperational Resilience - Question #672Cloud Data Security
Key maintenance and security are paramount within a cloud environment due to the widespread use of encryption for both data and transmissions. Which of the following key-management...
Key Management Systems (KMS)Cloud EncryptionCustomer ControlData Security - Question #673Cloud Concepts, Architecture and Design
Security is a critical yet often overlooked consideration for BCDR planning. At which stage of the planning process should security be involved?
BCDR PlanningSecurity by DesignPlanning ProcessScope Definition - Question #674Cloud Security Operations
Which type of testing uses the same strategies and toolsets that hackers would use?
Penetration TestingSecurity TestingEthical Hacking - Question #675Cloud Concepts, Architecture and Design
Which of the following statements about Type 1 hypervisors is true?
HypervisorsType 1 HypervisorVirtualization ArchitectureCloud Infrastructure - Question #676Cloud Platform and Infrastructure Security
Which format is the most commonly used standard for exchanging information within a federated identity system?
Federated IdentitySAMLIdentity and Access ManagementAuthentication Standards - Question #677Cloud Security Operations
Which ITIL component is focused on anticipating predictable problems and ensuring that configurations and operations are in place to prevent these problems from ever occurring?
ITILProblem ManagementService ManagementProactive Prevention - Question #678Cloud Concepts, Architecture and Design
Which of the following areas of responsibility would be shared between the cloud customer and cloud provider within the Software as a Service (SaaS) category?
Shared Responsibility ModelSaaSCloud ResponsibilitiesApplication Layer - Question #679Cloud Platform & Infrastructure Security
When a system needs to be exposed to the public Internet, what type of secure system would be used to perform only the desired operations?
Bastion hostNetwork securitySystem hardeningPerimeter security - Question #680Legal, Risk and Compliance
With the rapid emergence of cloud computing, very few regulations were in place that pertained to it specifically, and organizations often had to resort to using a collection of re...
ISO/IEC StandardsCloud ComplianceData ProtectionCloud Regulations - Question #681Cloud Data Security
Which of the following is NOT considered a type of data loss?
Data lossData availabilityData breachSecurity incidents - Question #682Legal, Risk and Compliance
Which of the following jurisdictions lacks a comprehensive national policy on data privacy and the protection of personally identifiable information (PII)?
Data Privacy LawsPII ProtectionJurisdictional Data ProtectionUS Privacy Landscape - Question #683Cloud Platform & Infrastructure Security
Which component of ITIL involves planning for the restoration of services after an unexpected outage or incident?
ITILContinuity ManagementDisaster Recovery PlanningService Restoration - Question #684Cloud Security Operations
Which component of ITIL pertains to planning, coordinating, executing, and validating changes and rollouts to production environments?
ITILRelease ManagementCloud OperationsService Management - Question #685Cloud Data Security
What process entails taking sensitive data and removing the indirect identifiers from each data object so that the identification of a single entity would not be possible?
Data AnonymizationData PrivacySensitive Data ProtectionIndirect Identifiers - Question #686Legal, Risk and Compliance
Because cloud providers will not give detailed information out about their infrastructures and practices to the general public, they will often use established auditing reports to...
Cloud ComplianceAudit ReportsSOC ReportsPublic Assurance - Question #687Cloud Data Security
Which of the following concepts is NOT one of the core components to an encryption system architecture?
Encryption systemsCryptographic componentsData security - Question #688Cloud Platform & Infrastructure Security
For optimal security, trust zones are used for network segmentation and isolation. They allow for the separation of various systems and tiers, each with its own security level. Whi...
VPNNetwork SegmentationRemote AccessTrust Zones - Question #689Legal, Risk and Compliance
Which of the following is NOT a major regulatory framework?
Regulatory frameworksComplianceData protection lawsSecurity standards - Question #690Legal, Risk and Compliance
As part of the auditing process, getting a report on the deviations between intended configurations and actual policy is often crucial for an organization. What term pertains to th...
Gap analysisAuditingCompliancePolicy deviation - Question #691Legal, Risk and Compliance
An audit scope statement defines the limits and outcomes from an audit. Which of the following would NOT be included as part of an audit scope statement?
Audit scopeCompliance auditsAudit planningGovernance - Question #692Cloud Security Operations
What concept and operational process must be spelled out clearly, as far as roles and responsibilities go, between the cloud provider and cloud customer for the mitigation of any p...
Incident ResponseCloud OperationsShared Responsibility ModelSecurity Event Management - Question #693Legal, Risk and Compliance
Your new CISO is placing increased importance and focus on regulatory compliance as your applications and systems move into cloud environments. Which of the following would NOT be...
Regulatory ComplianceCloud Data SecurityData StatesRoles and Responsibilities - Question #694Cloud Concepts, Architecture and Design
Cloud systems are increasingly used for BCDR solutions for organizations. What aspect of cloud computing makes their use for BCDR the most attractive?
Cloud CharacteristicsBCDRMeasured ServiceCloud Benefits - Question #695Cloud Concepts, Architecture and Design
What's a potential problem when object storage versus volume storage is used within IaaS for application use and dependency?
Object StorageBlock StorageData ConsistencyCloud Architecture - Question #696Cloud Data Security
Many aspects of cloud computing bring enormous benefits over a traditional data center, but also introduce new challenges unique to cloud computing. Which of the following aspects...
MultitenancyData ClassificationCloud Security ChallengesShared Responsibility - Question #697Cloud Concepts, Architecture and Design
Without the extensive funds of a large corporation, a small-sized company could gain considerable and cost-effective services for which of the following concepts by moving to a clo...
Cloud benefitsCost-effective securitySmall business cloud adoptionShared security model - Question #698Cloud Security Operations
BCDR strategies typically do not involve the entire operations of an organization, but only those deemed critical to their business. Which concept pertains to the amount of data an...
BCDRRecovery Point ObjectiveBusiness ContinuityDisaster Recovery - Question #699Cloud Platform and Infrastructure Security
Which of the following is NOT a commonly used communications method within cloud environments to secure data in transit?
Data in Transit SecurityNetwork Security ProtocolsDNSSECEncryption Methods - Question #700Cloud Platform & Infrastructure Security
Which crucial aspect of cloud computing can be most threatened by insecure APIs?
Insecure APIsCloud AutomationAPI SecurityCloud Management - Question #701Cloud Application Security
The WS-Security standards are built around all of the following standards except which one?
WS-SecurityWeb Services SecuritySOAPSAML - Question #702Cloud Platform & Infrastructure Security
Which protocol, as a part of TLS, handles negotiating and establishing a connection between two parties?
TLSHandshake ProtocolNetwork SecurityCommunication Security - Question #703Cloud Security Operations
BCDR strategies typically do not involve the entire operations of an organization, but only those deemed critical to their business. Which concept pertains to the required amount o...
BCDRRecovery Time ObjectiveDisaster RecoveryOperational Resilience - Question #704Cloud Data Security
Your company is in the planning stages of moving applications that have large data sets to a cloud environment. What strategy for data removal would be the MOST appropriate for you...
Data sanitizationCryptographic erasureCloud data securityData removal strategies - Question #705Cloud Data Security
Which of the following is a management role, versus a technical role, as it pertains to data management and oversight?
Data governanceData rolesInformation security rolesData ownership - Question #706Cloud Data Security
IRM solutions allow an organization to place different restrictions on data usage than would otherwise be possible through traditional security controls. Which of the following con...
Information Rights ManagementData protectionGranular access controlSecurity controls - Question #707Cloud Data Security
Which data protection strategy would be useful for a situation where the ability to remove sensitive data from a set is needed, but a requirement to retain the ability to map back...
Data Protection StrategiesTokenizationData ObfuscationData Security - Question #708Cloud Security Operations
A comprehensive BCDR plan will encapsulate many or most of the traditional concerns of operating a system in any data center. However, what is one consideration that is often overl...
BCDRDisaster Recovery PlanningService RestorationOperational Resilience - Question #709Cloud Platform & Infrastructure Security
Which of the following is NOT one of the components of multifactor authentication?
Multifactor AuthenticationAuthentication FactorsIdentity and Access ManagementSecurity Controls