CCSP Exam Questions

What is a form of cloud storage where data is stored as objects, arranged in a hierarchal structure, like a file tree?

Administrative penalties for violating the General Data Protection Regulation (GDPR) can range up to ____________.

What is a cloud storage architecture that manages the data in caches of copied content close to locations of high demand?

Which of the following is the best example of a key component of regulated PII?

Which key storage solution would be the BEST choice in a situation where availability might be of a particular concern?

Which of the following is a method for apportioning resources that involves prioritizing resource requests to resolve contention situations?

A process for __________ can aid in protecting against data disclosure due to lost devices.

A federated identity system is composed of three main components. Which of the following is NOT one of the three main components?

Which cloud service category brings with it the most expensive startup costs, but also the lowest costs for ongoing support and maintenance staff?

Which one of the following is not one of the three common threat modeling techniques?

Which cloud service category is MOST likely to use a client-side key management system?

Under EU law, a cloud customer who gives sensitive data to a cloud provider is still legally responsible for the damages resulting from a data breach caused by the provider; the EU...

Which ISO standard refers to addressing security risks in a supply chain?

When an organization implements an SIEM solution and begins aggregating event data, the configured event sources are only valid at the time it was configured. Application modificat...

Which of the following are contractual components that the CSP should review and understand fully when contracting with a cloud service provider? (Choose two.)

TLS uses ___________ to authenticate a connection and create a shared secret for the duration of the session.

The final phase of the cloud data lifecycle is the destroy phase, where data is ultimately deleted and done so in a secure manner to ensure it cannot be recovered or reconstructed....

What type of device is often leveraged to assist legacy applications that may not have the programmatic capability to process assertions from modern web services?

What is the federal agency that accepts applications for new patents?

Limits for resource utilization can be set at different levels within a cloud environment to ensure that no particular entity can consume a level of resources that impacts other cl...

You are the security manager for a company that is considering cloud migration to an IaaS environment. You are assisting your company's IT architects in constructing the environmen...

Your organization is developing software for wide use by the public. You have decided to test it in a cloud environment, in a PaaS model. Which of the following should be of partic...

The tasks performed by the hypervisor in the virtual environment can most be likened to the tasks of the ________ in the legacy environment.

All of the following are activities that should be performed when capturing and maintaining an accurate, secure system baseline, except ____________.

Which of the following report is most aligned with financial control audits?

Your organization has made it a top priority that any cloud environment being considered to host production systems have guarantees that resources will always be available for allo...

Which of the following is not typically included in the list of critical assets specified for continuity during BCDR contingency operations?

Which of the following data protection methodologies maintains the ability to connect back values to the original values?

You are the data manager for a retail company; you anticipate a much higher volume of sales activity in the final quarter of each calendar year than the other quarters. In order to...

Which of the following tools might be useful in data discovery efforts that are based on content analysis?

You are the security manager for an online retail sales company with 100 employees and a production environment hosted in a PaaS model with a major cloud provider. Your company pol...

The use of which of the following technologies will NOT require the security dependency of an operating system, other than its own?

Which of the following types of organizations is most likely to make use of open source software technologies?

According to the (ISC)2 Cloud Secure Data Life Cycle, which phase comes soon after (or at the same time as) the Create phase?

When an organization considers cloud migrations, the organization's software developers will need to know which _______ and _______ which the organization will be using, in order t...

Who will determine data classifications for the cloud customer?

Every cloud service provider that opts to join the CSA STAR program registry must complete a ___________.

Which concept of cloud computing pertains to the ability to reuse components and services of an application for other purposes?

Gap analysis is performed for what reason?

You have been tasked with creating an audit scope statement and are making your project outline. Which of the following is NOT typically included in an audit scope statement?

Different types of cloud deployment models use different types of storage from traditional data centers, along with many new types of software platforms for deploying applications...

Who is ultimately responsible for a data breach that includes personally identifiable information (PII), in the event of negligence on the part of the cloud provider?

Which of the following is not a reason for conducting audits?

Which of the following best describes a cloud carrier?

Data labels could include all the following, except:

Legal controls refer to which of the following?

Cloud environments pose many unique challenges for a data custodian to properly adhere to policies and the use of data. What poses the biggest challenge for a data custodian with a...

A typical DLP tool can enhance the organization's efforts at accomplishing what legal task?

Who should be the only entity allowed to declare that an organization can return to normal following contingency or BCDR operations?

When using transparent encryption of a database, where does the encryption engine reside?