CCSP | Renewal Certified Cloud Security Professional CCSP Free Exam

NEW QUESTION 1

Which of the following best describes a cloud carrier?

• A. A person or entity responsible for making a cloud service available to consumers
• B. The intermediary who provides connectivity and transport of cloud services between cloud providers and cloud consumers
• C. The person or entity responsible for keeping cloud services running for customers
• D. The person or entity responsible for transporting data across the Internet

Answer: B

NEW QUESTION 2

Devices in the cloud datacenter should be secure against attack. All the following are means of hardening devices, except:
Response:

• A. Using a strong password policy
• B. Removing default passwords
• C. Strictly limiting physical access
• D. Removing all admin accounts

Answer: D

NEW QUESTION 3

You are the IT security manager for a video game software development company. Which of the following is most likely to be your primary concern on a daily basis?
Response:

• A. Health and human safety
• B. Security flaws in your products
• C. Security flaws in your organization
• D. Regulatory compliance

Answer: C

NEW QUESTION 4

DLP solutions can aid all of the following security-related efforts except ______.
Response:

• A. Access control
• B. Egress monitoring
• C. e-discovery/forensics
• D. Data categorization/classification

Answer: A

NEW QUESTION 5

All of the following are usually nonfunctional requirements except ______.
Response:

• A. Color
• B. Sound
• C. Security
• D. Function

Answer: D

NEW QUESTION 6

Which phase of the cloud data lifecycle also typically entails the process of data classification? Response:

• A. Use
• B. Store
• C. Create
• D. Archive

Answer: C

NEW QUESTION 7

What is the federal agency that accepts applications for new patents?

• A. USDA
• B. USPTO
• C. OSHA
• D. SEC

Answer: B

NEW QUESTION 8

There are two reasons to conduct a test of the organization’s recovery from backup in an environment other
than the primary production environment. Which of the following is one of them? Response:

• A. It is good to invest in more than one community.
• B. You want to approximate contingency conditions, which includes not operating in the primary location.
• C. It is good for your personnel to see other places occasionally.
• D. Your regulators won’t follow you offsite, so you’ll be unobserved during your test.

Answer: B

NEW QUESTION 9

Which of the following data-sanitation approaches are always available within a cloud environment? Response:

• A. Physical destruction
• B. Shredding
• C. Overwriting
• D. Cryptographic erasure

Answer: D

NEW QUESTION 10

Which of the following should occur at each stage of the SDLC?

• A. Added functionality
• B. Management review
• C. Verification and validation
• D. Repurposing of any newly developed components

Answer: C

NEW QUESTION 11

Which security certification serves as a general framework that can be applied to any type of system or application?
Response:

• A. ISO/IEC 27001
• B. PCI DSS
• C. FIPS 140-2
• D. NIST SP 800-53

Answer: A

NEW QUESTION 12

You are the security subject matter expert (SME) for an organization considering a transition from the legacy environment into a hosted cloud provider’s data center.
One of the challenges you’re facing is whether the provider will have undue control over your data once it is within the provider’s data center; will the provider be able to hold your organization hostage because they have your data?
This is a(n) ______ issue. Response:

• A. Interoperability
• B. Portability
• C. Availability
• D. Security

Answer: B

NEW QUESTION 13

The nature of cloud computing and how it operates make complying with data discovery and disclosure orders more difficult. Which of the following concepts provides the biggest challenge in regard to data collection, pursuant to a legal order?
Response:

• A. Portability
• B. Multitenancy
• C. Reversibility
• D. Auto-scaling

Answer: B

NEW QUESTION 14

Although indirect identifiers cannot alone point to an individual, the more of them known can lead to a specific identity. Which strategy can be used to avoid such a connection being made?
Response:

• A. Masking
• B. Anonymization
• C. Obfuscation
• D. Encryption

Answer: B

NEW QUESTION 15

The Brewer-Nash security model is also known as which of the following? Response:

• A. MAC
• B. The Chinese Wall model
• C. Preventive measures
• D. RBAC

Answer: B

NEW QUESTION 16

SOX was enacted because of which of the following? Response:

• A. Poor BOD oversight
• B. Lack of independent audits
• C. Poor financial controls
• D. All of the above

Answer: D

NEW QUESTION 17
......