CCSP Exam Questions

Your company operates in a highly competitive market, with extremely high-value data assets. Senior management wants to migrate to a cloud environment but is concerned that provide...

Patches do all the following except ____________. Response:

Which of the following is an example of useful and sufficient data masking of the string "CCSP"? Response:

It is important to include _______ in the design of underfloor plenums if they are also used for wiring. Response:

Dynamic application security testing (DAST) is usually considered a ________ form of testing. Response: White-box

What aspect of a Type 2 hypervisor involves additional security concerns that are not relevant with a Type 1 hypervisor? Response:

Devices in the cloud datacenter should be secure against attack. All the following are means of hardening devices, except: Response:

A web application firewall (WAF) can understand and act on ________ traffic. Response:

The nature of cloud computing and how it operates make complying with data discovery and disclosure orders more difficult. Which of the following concepts provides the biggest chal...

Which of the following types of software is a Type 2 hypervisor dependent on that a Type 1 hypervisor isn't? Response:

Which kind of SSAE audit reviews controls dealing with the organization's controls for assuring the confidentiality, integrity, and availability of data? Response:

Access should be based on ____________. Response:

Which of the following methods of addressing risk is most associated with insurance? Response:

Bob is staging an attack against Alice's website. He is able to embed a link on her site that will execute malicious code on a visitor's machine, if the visitor clicks on the link....

Although indirect identifiers cannot alone point to an individual, the more of them known can lead to a specific identity. Which strategy can be used to avoid such a connection bei...

Tokenization requires two distinct ______________. Response:

DLP solutions can aid all of the following security-related efforts except ____________. Response:

With cloud computing crossing many jurisdictional boundaries, it is a virtual certainty that conflicts will arise between differing regulations. What is the major impediment to res...

What is the major difference between authentication/authorization? Response:

Which theoretical technology would allow superposition of physical states to increase both computing capacity and encryption keyspace? Response:

A cloud provider is looking to provide a higher level of assurance to current and potential cloud customers about the design and effectiveness of their security controls. Which of...

Anonymization is the process of removing from data sets. Response:

________ is perhaps the main external factor driving IAM efforts. Response:

Which of the following aspects of the BC/DR process poses a risk to the organization? Response:

What is one of the benefits of implementing an egress monitoring solution? Response:

Which of the following is not a security concern related to archiving data for long-term storage? Response:

If bit-splitting is used to store data sets across multiple jurisdictions, how may this enhance security? Response:

Cloud environments are based entirely on virtual machines and virtual devices, and those images are also in need of storage within the environment. What type of storage is typicall...

Alice is the CEO for a software company; she is considering migrating the operation from the current on-premises legacy environment into the cloud. In order to protect her company'...

The Brewer-Nash security model is also known as which of the following? Response:

A truly airgapped machine selector will ____________. Response:

In addition to BCDR, what other benefit can your data archive/backup provide? Response:

Setting thermostat controls by measuring the temperature will result in the ________ highest energy costs. Response:

The ISO/IEC 27001:2013 security standard contains 14 different domains that cover virtually all areas of IT operations and procedures. Which of the following is NOT one of the doma...

Cryptographic keys for encrypted data stored in the cloud should be ______________. Response:

Which is the most commonly used standard for information exchange within a federated identity system? Response:

What type of identity system allows trust and verifications between the authentication systems of multiple organizations? Response:

Software-defined networking (SDN) is intended to separate different network capabilities and allow for the granting of granular configurations, permissions, and features to non-net...

It's important to maintain a current asset inventory list, including surveying your environment on a regular basis, in order to ____________. Response:

An audit against the __________ will demonstrate that an organization has a holistic, comprehensive security program. Response:

What are the objectives of change management? (Choose all that apply.) Response:

Your company maintains an on-premises data center for daily production activities but wants to use a cloud service to augment this capability during times of increased demand (clou...

Which of the following threats from the OWASP Top Ten is the most difficult for an organization to protect against? Response:

Which of the following methods of addressing risk is most associated with insurance?

Which of the following aids in the ability to demonstrate due diligence efforts? Response:

Your application has been a continued target for SQL injection attempts. Which of the following technologies would be best used to combat the likeliness of a successful SQL injecti...

Federation allows _________ across organizations. Response:

Which of the following frameworks focuses specifically on design implementation and management?

Which of the following is not an example of a highly regulated environment?

Who operates the management plane? Response: