CCSP Exam Questions

The BCDR plan/process should be written and documented in such a way that it can be used by ____________. Response:

Which of the following would NOT be used to determine the classification of data? Response:

Security best practices in a virtualized network environment would include which of the following? Response:

During the assessment phase of a risk evaluation, what are the two types of tests that are performed? Response:

A user signs on to a cloud-based social media platform. In another browser tab, the user finds an article worth posting to the social media platform. The user clicks on the platfor...

Which of the following roles is responsible for creating cloud components and the testing and validation of services?

What is the best source for information about securing a physical asset's BIOS?

Which of the following is not a component of contractual PII?

Which of the following concepts refers to a cloud customer paying only for the resources and offerings they use within a cloud environment, and only for the duration that they are...

Which of the following roles involves testing, monitoring, and securing cloud services for an organization?

What is the only data format permitted with the SOAP API?

Which data formats are most commonly used with the REST API?

Which of the following threat types involves an application that does not validate authorization for portions of itself after the initial checks?

Which of the following roles involves overseeing billing, purchasing, and requesting audit reports for an organization within a cloud environment?

What is the biggest concern with hosting a key management system outside of the cloud environment?

Which of the following approaches would NOT be considered sufficient to meet the requirements of secure data destruction within a cloud environment?

Which of the following cloud aspects complicates eDiscovery?

What does the management plane typically utilize to perform administrative functions on the hypervisors that it has access to?

What is a serious complication an organization faces from the perspective of compliance with international operations?

Which networking concept in a cloud environment allows for network segregation and isolation of IP spaces?

Which of the following standards primarily pertains to cabling designs and setups in a data center?

Which of the following publishes the most commonly used standard for data center design in regard to tiers and topologies?

What type of segregation and separation of resources is needed within a cloud environment for multitenancy purposes versus a traditional data center model?

Which United States law is focused on data related to health records and privacy?

What is used for local, physical access to hardware within a data center?

Within an Infrastructure as a Service model, which of the following would NOT be a measured service?

Which of the following is NOT a criterion for data within the scope of eDiscovery?

Which United States law is focused on accounting and financial practices of organizations?

What type of masking strategy involves making a separate and distinct copy of data with masking in place?

Which of the following is the primary purpose of an SOC 3 report?

Which of the following roles is responsible for overseeing customer relationships and the processing of financial transactions?

Which protocol does the REST API depend on?

Which United States program was designed to enable organizations to bridge the gap between privacy laws and requirements of the United States and the European Union?

What is the biggest benefit to leasing space in a data center versus building or maintain your own?

Which of the following security measures done at the network layer in a traditional data center are also applicable to a cloud environment?

Which aspect of cloud computing will be most negatively impacted by vendor lock-in?

Which of the following APIs are most commonly used within a cloud environment?

Which of the following attempts to establish an international standard for eDiscovery processes and best practices?

Which of the following roles is responsible for obtaining new customers and securing contracts and agreements?

Which term relates to the application of scientific methods and practices to evidence?

Which of the following roles involves the provisioning and delivery of cloud services?

What is the primary reason that makes resolving jurisdictional conflicts complicated?

GAAPs are created and maintained by which organization?

Which of the following roles is responsible for preparing systems for the cloud, administering and monitoring services, and managing inventory and assets?

Which protocol allows a system to use block-level storage as if it was a SAN, but over TCP network traffic instead?

Which of the cloud deployment models is used by popular services such as iCloud, Dropbox, and OneDrive?

Why does a Type 2 hypervisor typically offer less security control than a Type 1 hypervisor?

Which is the appropriate phase of the cloud data lifecycle for determining the data's classification?

Which of the following is the optimal temperature for a data center, per the guidelines established by the America Society of Heating, Refrigeration, and Air Conditioning Engineers...

Which of the following terms is not associated with cloud forensics?