The Best Practice Test Preparation for the CCSP Certification Exam
CCSP Exam Dumps, Practice Test Questions BUNDLE PACK
NEW QUESTION # 79
During which phase of the cloud data lifecycle is it possible for the classification of data to change?
- A. Share
- B. Create
- C. Archive
- D. Use
Answer: B
Explanation:
Explanation/Reference:
Explanation:
The create phase encompasses any time data is created, imported, or modified. With any change in the content or value of data, the classification may also change. It must be continually reevaluated to ensure proper security. During the use, share, and archive phases, the data is not modified in any way, so the original classification is still relevant.
NEW QUESTION # 80
An audit scope statement defines the limits and outcomes from an audit.
Which of the following would NOT be included as part of an audit scope statement?
- A. Exclusions
- B. Certification
- C. Reports
- D. Billing
Answer: D
Explanation:
Billing for an audit, or other cost-related items, would not be part of an audit scope statement and would instead be handled prior to the actual audit as part of the contract between the organization and auditors.
Reports, exclusions to the scope of the audit, and required certifications on behalf of the systems or auditors are all crucial elements of an audit scope statement.
NEW QUESTION # 81
Which of the following is a possible negative aspect of bit-splitting?
Response:
- A. It may require trust in additional third parties beyond the primary cloud service provider.
- B. There may be cause for management concern that the technology will violate internal policy.
- C. Limited vendors make acquisition and support challenging.
- D. Users will have far greater difficulty understanding the implementation.
Answer: A
NEW QUESTION # 82
Which of the following aspects of security is solely the responsibility of the cloud provider?
- A. Operating system auditing
- B. Physical security
- C. Regulatory compliance
- D. Personal security of developers
Answer: B
Explanation:
Regardless of the particular cloud service used, physical security of hardware and facilities is always the sole responsibility of the cloud provider. The cloud provider may release information about their physical security policies and procedures to ensure any particular requirements of potential customers will meet their regulatory obligations. Personal security of developers and regulatory compliance are always the responsibility of the cloud customer. Responsibility for operating systems, and the auditing of them, will differ based on the cloud service category used.
NEW QUESTION # 83
Which of the following roles involves the provisioning and delivery of cloud services?
- A. Cloud service business manager
- B. Cloud service manager
- C. Cloud service deployment manager
- D. Cloud service operations manager
Answer: B
Explanation:
Explanation
Explanation:
The cloud service manager is responsible for the delivery of cloud services, the provisioning of cloud services, and the overall management of cloud services.
NEW QUESTION # 84
Which of the following roles involves testing, monitoring, and securing cloud services for an organization?
- A. Cloud service business manager
- B. Cloud service administrator
- C. Cloud service user
- D. Cloud service integrator
Answer: B
Explanation:
The cloud service administrator is responsible for testing cloud services, monitoring services, administering security for services, providing usage reports on cloud services, and addressing problem reports
NEW QUESTION # 85
While an audit is being conducted, which of the following could cause management and the auditors to change the original plan in order to continue with the audit?
Response:
- A. Cost overruns
- B. Impact on systems
- C. Regulatory changes
- D. Software version changes
Answer: A
NEW QUESTION # 86
The cloud customer's trust in the cloud provider can be enhanced by all of the following except:
- A. Shared administration
- B. real-time video surveillance
- C. SLAs
- D. Audits
Answer: B
Explanation:
Explanation/Reference:
Explanation:
Video surveillance will not provide meaningful information and will not enhance trust. All the others will do it.
NEW QUESTION # 87
Which of the following is considered an internal redundancy for a data center?
- A. Power substations
- B. Power distribution units
- C. Generators
- D. Network circuits
Answer: B
Explanation:
Power distribution units are internal to a data center and supply power to internal components such as racks, appliances, and cooling systems. As such, they are considered an internal redundancy.
NEW QUESTION # 88
The Transport Layer Security (TLS) protocol creates a secure communications channel over public media (such as the Internet). In a typical TLS session, who initiates the protocol?
- A. The server
- B. The client
- C. The certifying authority
- D. The ISP
Answer: B
NEW QUESTION # 89
Which of the following is a risk associated with manual patching especially in the cloud?
Response:
- A. No notice before the impact is realized
- B. Patches may or may not address the vulnerability they were designed to fix.
- C. Lack of applicability to the environment
- D. The possibility for human error
Answer: D
NEW QUESTION # 90
Aside from the fact that the cloud customer probably cannot locate/reach the physical storage assets of the cloud provider, and that wiping an entire storage space would impact other customers, why would degaussing probably not be an effective means of secure sanitization in the cloud?
Response:
- A. Federal law prohibits it in the United States.
- B. The blast radius is too wide.
- C. Cloud data storage may not be affected by degaussing.
- D. All the data storage space in the cloud is already gaussed.
Answer: C
NEW QUESTION # 91
What must SOAP rely on for security?
- A. Encryption
- B. SSL
- C. Tokenization
- D. TLS
Answer: A
Explanation:
Simple Object Access Protocol (SOAP) uses Extensible Markup Language (XML) for passing data, and it must rely on the encryption of those data packages for security.
NEW QUESTION # 92
Which of the following areas of responsibility would be shared between the cloud customer and cloud provider within the Software as a Service (SaaS) category?
- A. Governance
- B. Application
- C. Data
- D. Physical
Answer: B
Explanation:
With SaaS, the application is a shared responsibility between the cloud provider and cloud customer.
Although the cloud provider is responsible for deploying, maintaining, and securing the application, the cloud customer does carry some responsibility for the configuration of users and options. Regardless of the cloud service category used, the physical environment is always the sole responsibility of the cloud provider. With all cloud service categories, the data and governance are always the sole responsibility of the cloud customer.
NEW QUESTION # 93
What are the U.S. Commerce Department controls on technology exports known as?
- A. DRM
- B. ITAR
- C. EAR
- D. EAL
Answer: B
Explanation:
Explanation/Reference:
Explanation:
EAR is a Commerce Department program. Evaluation assurance levels are part of the Common Criteria standard from ISO. Digital rights management tools are used for protecting electronic processing of intellectual property.
NEW QUESTION # 94
Which of the following is a method for apportioning resources that involves setting maximum usage amounts for all tenants/customers within the environment?
- A. Cancellations
- B. Shares
- C. Reservations
- D. Limits
Answer: D
NEW QUESTION # 95
What are the U.S. State Department controls on technology exports known as?
- A. DRM
- B. ITAR
- C. EAR
- D. EAL
Answer: B
Explanation:
ITAR is a Department of State program. Evaluation assurance levels are part of the Common Criteria standard from ISO. Digital rights management tools are used for protecting electronic processing of intellectual property.
NEW QUESTION # 96
Which document will enforce uptime and availability requirements between the cloud customer and cloud provider?
Response:
- A. Service level agreement
- B. Contract
- C. Operational level agreement
- D. Regulation
Answer: A
NEW QUESTION # 97
DLP can be combined with what other security technology to enhance data controls?
Response:
- A. DRM
- B. Kerberos
- C. Hypervisors
- D. SIEM
Answer: A
NEW QUESTION # 98
A comprehensive BCDR plan will encapsulate many or most of the traditional concerns of operating a system in any data center.
However, what is one consideration that is often overlooked with the formulation of a BCDR plan?
- A. Restoration of services
- B. Capacity at the BCDR site
- C. Change management processes
- D. Availability of staff
Answer: A
Explanation:
Explanation
BCDR planning tends to focus so much on the failing over of services in the case of a disaster that recovery back to primary hosting after the disaster is often overlooked. In many instances, this can be just as complex a process as failing over, if not more so. Availability of staff, capacity at the BCDR site, and change management processes are typically integral to BCDR plans and are common components of them.
NEW QUESTION # 99
Which of the following represents a minimum guaranteed resource within a cloud environment for the cloud customer?
- A. Share
- B. Limit
- C. Reservation
- D. Provision
Answer: C
Explanation:
A reservation is a minimum resource that is guaranteed to a customer within a cloud environment. Within a cloud, a reservation can pertain to the two main aspects of computing:
memory and processor. With a reservation in place, the cloud provider guarantees that a cloud customer will always have at minimum the necessary resources available to power on and operate any of their services.
NEW QUESTION # 100
Which of the following service capabilities gives the cloud customer an established and maintained framework to deploy code and applications?
- A. Platform
- B. Software
- C. Desktop
- D. Infrastructure
Answer: A
Explanation:
Explanation
The platform service capability provides programming languages and libraries from the cloud provider, where the customer can deploy their own code and applications into a managed and controlled framework.
NEW QUESTION # 101
Which cloud storage type requires special consideration on the part of the cloud customer to ensure they do not program themselves into a vendor lock-in situation?
- A. Structured
- B. Unstructured
- C. Volume
- D. Object
Answer: A
Explanation:
Explanation
Structured storage is designed, maintained, and implemented by a cloud service provider as part of a PaaS offering. It is specific to that cloud provider and the way they have opted to implement systems, so special care is required to ensure that applications are not designed in a way that will lock the cloud customer into a specific cloud provider with that dependency. Unstructured storage for auxiliary files would not lock a customer into a specific provider. With volume and object storage, because the cloud customer maintains their own systems with IaaS, moving and replicating to a different cloud provider would be very easy.
NEW QUESTION # 102
......
How much the duration of time
The time span for the CCSP exam is 03 hours. In these 03 hours, you have to answer all the asked questions.
Prepare for the Actual ISC Cloud Security CCSP Exam Practice Materials Collection: https://testking.realvce.com/CCSP-VCE-file.html