Want to know features? Want to lear more about experience? Study . Gat a success with an absolute guarantee to pass ISC2 CCSP (Certified Cloud Security Professional) test on your first attempt.
Check CCSP free dumps before getting the full version:
NEW QUESTION 1
Fiber-optic lines are considered part of layer ______ of the OSI model. Response:
- A. 1
- B. 3
- C. 5
- D. 7
Answer: A
NEW QUESTION 2
There are two general types of smoke detectors. Which type uses a small portion of radioactive material? Response:
- A. Photoelectric
- B. Ionization
- C. Electron pulse
- D. Integral field
Answer: B
NEW QUESTION 3
An audit against the ______ will demonstrate that an organization has a holistic, comprehensive security program.
Response:
- A. SAS 70 standard
- B. SSAE 16 standard
- C. SOC 2, Type 2 report matrix
- D. ISO 27001 certification requirements
Answer: D
NEW QUESTION 4
Which of the following data-sanitation approaches are always available within a cloud environment? Response:
- A. Physical destruction
- B. Shredding
- C. Overwriting
- D. Cryptographic erasure
Answer: D
NEW QUESTION 5
What type of software is often considered secured and validated via community knowledge?
Response:
- A. Proprietary
- B. Object-oriented
- C. Open source
- D. Scripting
Answer: C
NEW QUESTION 6
Which of the following is not a security concern related to archiving data for long-term storage? Response:
- A. Long-term storage of the related cryptographic keys
- B. Format of the data
- C. Media the data resides on
- D. Underground depth of the storage facility
Answer: D
NEW QUESTION 7
Application virtualization can typically be used for .
- A. Denying access to untrusted users
- B. Detecting and mitigating DDoS attacks
- C. Replacing encryption as a necessary control
- D. Running an application on an endpoint without installing it
Answer: D
NEW QUESTION 8
Firewalls can detect attack traffic by using all these methods except ______.
Response:
- A. Known past behavior in the environment
- B. Identity of the malicious user
- C. Point of origination
- D. Signature matching
Answer: B
NEW QUESTION 9
While an audit is being conducted, which of the following could cause management and the auditors to change the original plan in order to continue with the audit?
Response:
- A. Cost overruns
- B. Impact on systems
- C. Regulatory changes
- D. Software version changes
Answer: A
NEW QUESTION 10
Which document will enforce uptime and availability requirements between the cloud customer and cloud provider?
Response:
- A. Contract
- B. Operational level agreement
- C. Service level agreement
- D. Regulation
Answer: C
NEW QUESTION 11
What sort of legal enforcement may the Payment Card Industry (PCI) Security Standards Council not bring to bear against organizations that fail to comply with the Payment Card Industry Data Security Standard (PCI DSS)?
Response:
- A. Fines
- B. Jail time
- C. Suspension of credit card processing privileges
- D. Subject to increased audit frequency and scope
Answer: B
NEW QUESTION 12
Which phase of the cloud data lifecycle also typically entails the process of data classification? Response:
- A. Use
- B. Store
- C. Create
- D. Archive
Answer: C
NEW QUESTION 13
Which concept pertains to cloud customers paying only for the resources they use and consume, and only for the duration they are using them?
Response:
- A. Measured service
- B. Auto-scaling
- C. Portability
- D. Elasticity
Answer: A
NEW QUESTION 14
Although indirect identifiers cannot alone point to an individual, the more of them known can lead to a specific identity. Which strategy can be used to avoid such a connection being made?
Response:
- A. Masking
- B. Anonymization
- C. Obfuscation
- D. Encryption
Answer: B
NEW QUESTION 15
Which of the following is a risk that stems from a virtualized environment? Response:
- A. Live virtual machines in the production environment are moved from one host to another in the clear.
- B. Cloud data centers can become a single point of failure.
- C. It is difficult to find and contract with multiple utility providers of the same type (electric, water, etc.).
- D. Modern SLA demands are stringent and very hard to meet.
Answer: A
NEW QUESTION 16
The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing.
According to the CSA, what aspect of managed cloud services makes the threat of malicious insiders so alarming?
Response:
- A. Scalability
- B. Multitenancy
- C. Metered service
- D. Flexibility
Answer: B
NEW QUESTION 17
What does nonrepudiation mean? Response:
- A. Prohibiting certain parties from a private conversation
- B. Ensuring that a transaction is completed before saving the results
- C. Ensuring that someone cannot turn off auditing capabilities while performing a function
- D. Preventing any party that participates in a transaction from claiming that it did not
Answer: D
NEW QUESTION 18
What are the six components that make up the STRIDE threat model? Response:
- A. Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege
- B. Spoofing, Tampering, Non-Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege
- C. Spoofing, Tampering, Repudiation, Information Disclosure, Distributed Denial of Service, and Elevation of Privilege
- D. Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Social Engineering
Answer: A
NEW QUESTION 19
Which of the following is not a feature of SAST? Response:
- A. Source code review
- B. Team-building efforts
- C. “White-box” testing
- D. Highly skilled, often expensive outside consultants
Answer: B
100% Valid and Newest Version CCSP Questions & Answers shared by Passcertsure, Get Full Dumps HERE: https://www.passcertsure.com/CCSP-test/ (New 353 Q&As)