Online Questions - Valid Practice To your CCSP Exam (Updated 830 Questions)
Practice To CCSP - Remarkable Practice On your Certified Cloud Security Professional Exam
NEW QUESTION 252
What is the risk to the organization posed by dashboards that display data discovery results?
Response:
- A. Increased chance of external penetration
- B. Higher likelihood of inadvertent disclosure
- C. Flawed management decisions based on massaged displays
- D. Raised incidence of physical theft
Answer: C
NEW QUESTION 253
The different cloud service models have varying levels of responsibilities for functions and operations depending with the model's level of service.
In which of the following models would the responsibility for patching lie predominantly with the cloud customer?
- A. IaaS
- B. DaaS
- C. SaaS
- D. PaaS
Answer: A
Explanation:
Explanation/Reference:
Explanation:
With Infrastructure as a Service (IaaS), the cloud customer is responsible for deploying and maintaining its own systems and virtual machines. Therefore, the customer is solely responsible for patching and any other security updates it finds necessary. With Software as a Service (SaaS), Platform as a Service (PaaS), and Desktop as a Service (DaaS), the cloud provider maintains the infrastructure components and is responsible for maintaining and patching them.
NEW QUESTION 254
The European Union passed the first major regulation declaring data privacy to be a human right. In what year did it go into effect?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
Adopted in 1995, Directive 95/46 EC establishes strong data protection and policy requirements, including the declaring of data privacy to be a human right. It establishes that an individual has the right to be notified when their personal data is being access or processed, that it only will ever be accessed for legitimate purposes, and that data will only be accessed to the exact extent it needs to be for the particular process or request.
NEW QUESTION 255
You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment.
Which of these activities should you perform before deploying the tool?
Response:
- A. Harden all your routers
- B. Survey your company's departments about the data under their control
- C. Adjust the hypervisors
- D. Reconstruct your firewalls
Answer: B
NEW QUESTION 256
____________ can often be the result of inadvertent activity.
- A. DDoS
- B. Disasters
- C. Sprawl
- D. Phishing
Answer: C
NEW QUESTION 257
Your new CISO is placing increased importance and focus on regulatory compliance as your applications and systems move into cloud environments.
Which of the following would NOT be a major focus of yours as you develop a project plan to focus on regulatory compliance?
- A. Data at rest
- B. Data in transit
- C. Data in use
- D. Data custodian
Answer: D
Explanation:
Explanation/Reference:
Explanation:
The jurisdictions where data is being stored, processed, or consumed are the ones that dictate the regulatory frameworks and compliance requirements, regardless of who the data owner or custodian might be. The other concepts for protecting data would all play a prominent role in regulatory compliance with a move to the cloud environment. Each concept needs to be evaluated based on the new configurations as well as any potential changes in jurisdiction or requirements introduced with the move to a cloud.
NEW QUESTION 258
Which of the following components are part of what a CCSP should review when looking at contracting with a cloud service provider?
- A. Redundant uplink grafts
- B. The physical layout of the datacenter
- C. Use of subcontractors
- D. Background checks for the provider's personnel
Answer: C
Explanation:
The use of subcontractors can add risk to the supply chain and should be considered; trusting the provider's management of their vendors and suppliers (including subcontractors) is important to trusting the provider. Conversely, the customer is not likely to be allowed to review the physical design of the datacenter (or, indeed, even know the exact location of the datacenter) or the personnel security specifics for the provider's staff. "Redundant uplink grafts" is a nonsense term used as a distractor.
NEW QUESTION 259
Hardening the operating system refers to all of the following except:
- A. Removing antimalware agents
- B. Closing unused ports
- C. Limiting administrator access
- D. Removing unnecessary services and libraries
Answer: A
Explanation:
Explanation
Removing antimalware agents. Hardening the operating system means making it more secure. Limiting administrator access, closing unused ports, and removing unnecessary services and libraries all have the potential to make an OS more secure. But removing antimalware agents would actually make the system less secure. If anything, antimalware agents should be added, not removed.
NEW QUESTION 260
A crucial decision any company must make is in regard to where it hosts the data systems it depends on. A debate exists as to whether it's best to lease space in a data center or build your own data center--and now with cloud computing, whether to purchase resources within a cloud.
What is the biggest advantage to leasing space in a data center versus procuring cloud services?
- A. Regulations
- B. Security
- C. Costs
- D. Control
Answer: D
Explanation:
When leasing space in a data center versus utilizing cloud services, a customer has a much greater control over its systems and services, from both the hardware/software perspective and the operational management perspective. Costs, regulations, and security are all prime considerations regardless of the hosting type selected. Although regulations will be the same in either hosting solution, in most instances, costs and security will be greater factors with leased space.
NEW QUESTION 261
When an API is being leveraged, it will encapsulate its data for transmission back to the requesting party or service.
What is the data encapsulation used with the SOAP protocol referred to as?
- A. Object
- B. Packet
- C. Envelope
- D. Payload
Answer: C
Explanation:
Explanation
Simple Object Access Protocol (SOAP) encapsulates its information in what is known as a SOAP envelope. It then leverages common communications protocols for transmission. Object is a type of cloud storage, but also a commonly used term with certain types of programming languages. Packet and payload are terms that sound similar to envelope but are not correct in this case.
NEW QUESTION 262
Which of the following represents a control on the maximum amount of resources that a single customer, virtual machine, or application can consume within a cloud environment?
- A. Share
- B. Limit
- C. Reservation
- D. Provision
Answer: B
Explanation:
Explanation
Limits are put in place to enforce a maximum on the amount of memory or processing a cloud customer can use. This can be done either on a virtual machine or as a comprehensive whole for a customer, and is meant to ensure that enormous cloud resources cannot be allocated or consumed by a single host or customer to the detriment of other hosts and customers.
NEW QUESTION 263
One of the security challenges of operating in the cloud is that additional controls must be placed on file storage systems because ____________.
Response:
- A. Virtual machines are stored as snapshotted files when not in use
- B. Virtualization necessarily prevents the use of application-based security controls
- C. File stores are always kept in plain text in the cloud
- D. There is no way to sanitize file storage space in the cloud
Answer: A
NEW QUESTION 264
Federation allows _________ across organizations.
Response:
- A. Encryption
- B. Role replication
- C. Access
- D. Policy
Answer: C
NEW QUESTION 265
All of these are methods of data discovery, except:
- A. Metadata-based
- B. User-based
- C. Content-based
- D. Label-based
Answer: B
Explanation:
Explanation
All the others are valid methods of data discovery; user-based is a red herring with no meaning.
NEW QUESTION 266
What is the term we use to describe the general ease and efficiency of moving data from one cloud provider either to another cloud provider or down from the cloud?
- A. Portability
- B. Mobility
- C. Elasticity
- D. Obfuscation
Answer: A
Explanation:
Explanation
Elasticity is the name for the benefit of cloud computing where resources can be apportioned as necessary to meet customer demand. Obfuscation is a technique to hide full raw datasets, either from personnel who do not have need to know or for use in testing. Mobility is not a term pertinent to the CBK.
NEW QUESTION 267
All of the following entitles are required to use FedRAMP-accredited Cloud Service Providers except ___________.
- A. The CIA
- B. The US post office
- C. Federal Express
- D. The Department of Homeland Security
Answer: C
NEW QUESTION 268
......
True CCSP Exam Extraordinary Practice For the Exam: https://www.itexamreview.com/CCSP-exam-dumps.html
Get 100% Passing Success With True CCSP Exam: https://drive.google.com/open?id=1BlL5nt7RZXpa2UAN3Vh1-EMEPwGhTvbF
