CCSP | Exact ISC2 CCSP Free Practice Test Online

NEW QUESTION 1

Static software security testing typically uses ______ as a measure of how thorough the testing was. Response:

• A. Number of testers
• B. Flaws detected
• C. Code coverage
• D. Malware hits

Answer: C

NEW QUESTION 2

When using transparent encryption of a database, where does the encryption engine reside? Response:

• A. At the application using the database
• B. On the instance(s) attached to the volume
• C. In a key management system
• D. Within the database

Answer: D

NEW QUESTION 3

Tokenization requires two distinct ______.
Response:

• A. Authentication factors
• B. Databases
• C. Encryption keys
• D. Personnel

Answer: B

NEW QUESTION 4

Which of the following is the recommended operating range for temperature and humidity in a data center?
Response:

• A. Between 62 °F - 81 °F and 40% and 65% relative humidity
• B. Between 64 °F - 81 °F and 40% and 60% relative humidity
• C. Between 64 °F - 84 °F and 30% and 60% relative humidity
• D. Between 60 °F - 85 °F and 40% and 60% relative humidity

Answer: B

NEW QUESTION 5

Alice is the CEO for a software company; she is considering migrating the operation from the current on-premises legacy environment into the cloud.
In order to protect her company’s intellectual property, Alice might want to consider implementing all these techniques/solutions except ______.
Response:

• A. Egress monitoring
• B. Encryption
• C. Turnstiles
• D. Digital watermarking

Answer: C

NEW QUESTION 6

When designing a cloud data center, which of the following aspects is not necessary to ensure continuity of operations during contingency operations?
Response:

• A. Access to clean water
• B. Broadband data connection
• C. Extended battery backup
• D. Physical access to the data center

Answer: C

NEW QUESTION 7

What is a cloud storage architecture that manages the data in caches of copied content close to locations of high demand?
Response:

• A. Object-based storage
• B. File-based storage
• C. Database
• D. CDN

Answer: D

NEW QUESTION 8

All of the following are activities that should be performed when capturing and maintaining an accurate, secure system baseline, except ______.
Response:

• A. Audit the baseline to ensure that all configuration items have been included and applied correctly
• B. Impose the baseline throughout the environment
• C. Capture an image of the baseline system for future reference/versioning/rollback purposes
• D. Document all baseline configuration elements and versioning data

Answer: B

NEW QUESTION 9

Which of the following contract terms most incentivizes the cloud provider to meet the requirements listed in the SLA?
Response:

• A. Regulatory oversight
• B. Financial penalties
• C. Performance details
• D. Desire to maintain customer satisfaction

Answer: B

NEW QUESTION 10

You are developing a new process for data discovery for your organization and are charged with ensuring that all applicable data is included. Which of the following is NOT one of the three methods of data discovery?
Response:

• A. Metadata
• B. Content analysis
• C. Labels
• D. Classification

Answer: D

NEW QUESTION 11

Digital rights management (DRM) solutions (sometimes referred to as information rights management, or IRM) often protect unauthorized distribution of what type of intellectual property?
Response:

• A. Patents
• B. Trademarks
• C. Personally identifiable information (PII)
• D. Copyright

Answer: D

NEW QUESTION 12

Which type of web application monitoring most closely measures actual activity? Response:

• A. Synthetic performance monitoring
• B. Real-user monitoring (RUM)
• C. Security information and event management (SIEM)
• D. Database application monitor (DAM)

Answer: B

NEW QUESTION 13

Penetration testing is a(n) ______ form of security assessment.
Response:

• A. Active
• B. Comprehensive
• C. Total
• D. Inexpensive

Answer: A

NEW QUESTION 14

A truly airgapped machine selector will ______.
Response:

• A. Terminate a connection before creating a new connection
• B. Be made of composites and not metal
• C. Have total Faraday properties
• D. Not be portable

Answer: A

NEW QUESTION 15

TLS uses ______ to authenticate a connection and create a shared secret for the duration of the session.

• A. SAML 2.0
• B. X.509 certificates
• C. 802.11X
• D. The Diffie-Hellman process

Answer: B

NEW QUESTION 16

Which of the following is a risk in the cloud environment that is not existing or is as prevalent in the legacy environment?
Response:

• A. Legal liability in multiple jurisdictions
• B. Loss of productivity due to DDoS
• C. Ability of users to gain access to their physical workplace
• D. Fire

Answer: A

NEW QUESTION 17
......