CCSP | All About Pinpoint CCSP Exam Dumps

NEW QUESTION 1

Impact resulting from risk being realized is often measured in terms of ______.

• A. Amount of data lost
• B. Money
• C. Amount of property lost
• D. Number of people affected

Answer: B

NEW QUESTION 2

Although encryption can help an organization to effectively decrease the possibility of data breaches, which other type of threat can it increase the chances of?
Response:

• A. Insecure interfaces
• B. Data loss
• C. System vulnerabilities
• D. Account hijacking

Answer: B

NEW QUESTION 3
What can tokenization be used for? Response:

• A. Encryption
• B. Compliance with PCI DSS
• C. Enhancing the user experience
• D. Giving management oversight to e-commerce functions

Answer: B

NEW QUESTION 4

Cryptographic keys for encrypted data stored in the cloud should be ______.
Response:

• A. At least 128 bits long
• B. Not stored with the cloud provider
• C. Split into groups
• D. Generated with redundancy

Answer: B

NEW QUESTION 5

Who is ultimately responsible for a data breach that includes personally identifiable information (PII), in the event of negligence on the part of the cloud provider?

• A. The user
• B. The subject
• C. The cloud provider
• D. The cloud customer

Answer: D

NEW QUESTION 6

Which of the following might make crypto-shredding difficult or useless? Response:

• A. Cloud provider also managing the organization’s keys
• B. Lack of physical access to the environment
• C. External attackers
• D. Lack of user training and awareness

Answer: A

NEW QUESTION 7

Which standards body depends heavily on contributions and input from its open membership base?
Response:

• A. NIST
• B. ISO
• C. ICANN
• D. CSA

Answer: D

NEW QUESTION 8

Which of the following is the best and only completely secure method of data destruction? Response:

• A. Degaussing
• B. Crypto-shredding
• C. Physical destruction of resources that store the data
• D. Legal order issued by the prevailing jurisdiction where the data is geographically situated

Answer: C

NEW QUESTION 9

At which phase of the SDLC process should security begin participating? Response:

• A. Requirements gathering
• B. Requirements analysis
• C. Design
• D. Testing

Answer: A

NEW QUESTION 10

Which of the following would NOT be included as input into the requirements gathering for an application or system?
Response:

• A. Users
• B. Management
• C. Regulators
• D. Auditors

Answer: D

NEW QUESTION 11

Which strategy involves using a fake production system to lure attackers in order to learn about their tactics?
Response:

• A. IDS
• B. Honeypot
• C. IPS
• D. Firewall

Answer: B

NEW QUESTION 12

A web application firewall (WAF) can understand and act on ______ traffic.
Response:

• A. Malicious
• B. SMTP
• C. ICMP
• D. HTTP

Answer: D

NEW QUESTION 13

You are the security manager for a small retail business involved mainly in direct e-commerce transactions with individual customers (members of the public). The bulk of your market is in Asia, but you do fulfill orders globally.
Your company has its own data center located within its headquarters building in Hong Kong, but it also uses a public cloud environment for contingency backup and archiving purposes. Your company has decided to expand its business to include selling and monitoring life-support equipment for medical providers.
What characteristic do you need to ensure is offered by your cloud provider? Response:

• A. Full automation of security controls within the cloud data center
• B. Tier 4 of the Uptime Institute certifications
• C. Global remote access
• D. Prevention of ransomware infections

Answer: B

NEW QUESTION 14

The ISO/IEC 27001:2013 security standard contains 14 different domains that cover virtually all areas of IT operations and procedures. Which of the following is NOT one of the domains listed in the standard?
Response:

• A. Legal
• B. Management
• C. Assets
• D. Supplier Relationships

Answer: A

NEW QUESTION 15

Which of the following characteristics is associated with digital rights management (DRM) solutions (sometimes referred to as information rights management, or IRM)?
Response:

• A. Mapping to existing access control lists (ACLs)
• B. Delineating biometric catalogs
• C. Preventing multifactor authentication
• D. Prohibiting unauthorized transposition

Answer: A

NEW QUESTION 16

Which of the following best describes SAML? Response:

• A. A standard for developing secure application management logistics
• B. A standard for exchanging authentication and authorization data between security domains
• C. A standard for exchanging usernames and passwords across devices
• D. A standard used for directory synchronization

Answer: B

NEW QUESTION 17
......