CCSP Exam Questions

The Transport Layer Security (TLS) protocol creates a secure communications channel over public media (such as the Internet). In a typical TLS session, who initiates the protocol?

Which of the following is the best and only completely secure method of data destruction?

You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment. In order to get truly holistic coverage...

The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, what is one reason...

Which document will enforce uptime and availability requirements between the cloud customer and cloud provider?

All of the following are terms used to described the practice of obscuring original raw data so that only a portion is displayed for operational purposes, except:

Because PaaS implementations are so often used for software development, what is one of the vulnerabilities that should always be kept in mind?

Of the following, which is probably the most significant risk in a managed cloud environment?

All of the following are usually nonfunctional requirements except ____________.

You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment. What should you not expect the tool to...

When a data center is configured such that the backs of the devices face each other and the ambient temperature in the work area is cool, it is called ___________.

One of the security challenges of operating in the cloud is that additional controls must be placed on file storage systems because ____________.

DLP can be combined with what other security technology to enhance data controls?

Which of the following best describes data masking?

The Transport Layer Security (TLS) protocol creates a secure communications channel over public media (such as the Internet). In a typical TLS session, what is the usual means for...

Which of the following are considered to be the building blocks of cloud computing?

A honeypot should contain _________ data.

Which of the following is a risk in the cloud environment that is not existing or is as prevalent in the legacy environment?

You are the security manager for a software development firm. Your company is interested in using a managed cloud service provider for hosting its testing environment. Management i...

The Open Web Application Security Project (OWASP) Top Ten is a list of web application security threats that is composed by a member-driven OWASP committee of application developme...

Data labels could include all the following, except:

Which of the following is not an enforceable governmental request?

Which of the following is characterized by a set maximum capacity?

What are the six components that make up the STRIDE threat model?

You are the security manager for a small application development company. Your company is considering the use of the cloud for software testing purposes. Which cloud service model...

What is the primary security mechanism used to protect SOAP and REST APIs?

Which of the following is not one of the defined security controls domains within the Cloud Controls Matrix, published by the Cloud Security Alliance?

The cloud deployment model that features joint ownership of assets among an affinity group is known as:

Which cloud storage type uses an opaque value or descriptor to categorize and organize data?

While an audit is being conducted, which of the following could cause management and the auditors to change the original plan in order to continue with the audit?

An organization could have many reasons that are common throughout the industry to activate a BCDR situation. Which of the following is NOT a typical reason to activate a BCDR plan...

Which of the following is a risk associated with manual patching especially in the cloud?

What are SOCI/SOCII/SOCIII?

Which type of threat is often used in conjunction with phishing attempts and is often viewed as greatly increasing the likeliness of success?

Each of the following is an element of the Identification phase of the identity and access management (IAM) process except _____________.

What is a key component of GLBA?

A denial of service (DoS) attack can potentially impact all customers within a cloud environment with the continued allocation of additional resources. Which of the following can b...

Tokenization requires at least ____ database(s).

In a Lightweight Directory Access Protocol (LDAP) environment, each entry in a directory server is identified by a ___________.

Aside from the fact that the cloud customer probably cannot locate/reach the physical storage assets of the cloud provider, and that wiping an entire storage space would impact oth...

Which phase of the cloud data lifecycle also typically entails the process of data classification?

What could be the result of failure of the cloud provider to secure the hypervisor in such a way that one user on a virtual machine can see the resource calls of another user's vir...

Federation should be __________ to the users.

Which of the following is a possible negative aspect of bit-splitting?

Which of the following methods is often used to obscure data from production systems for use in test or development environments?

All of the following methods can be used to attenuate the harm caused by escalation of privilege except:

DLP solutions typically involve all of the following aspects except ___________.

You are the security director for a chain of automotive repair centers across several states. Your company uses a cloud SaaS provider, for business functions that cross several of...

Which of these characteristics of a virtualized network adds risks to the cloud environment?

Which of the following characteristics is associated with digital rights management (DRM) solutions (sometimes referred to as information rights management, or IRM)?