CCSP | The Secret Of ISC2 CCSP Test

NEW QUESTION 1

Because PaaS implementations are so often used for software development, what is one of the vulnerabilities that should always be kept in mind?
Response:

• A. Malware
• B. Loss/theft of portable devices
• C. Backdoors
• D. DoS/DDoS

Answer: C

NEW QUESTION 2

Which ISO standard refers to addressing security risks in a supply chain?

• A. ISO 27001
• B. ISO/IEC 28000:2007
• C. ISO 18799
• D. ISO 31000:2009

Answer: B

NEW QUESTION 3

Application virtualization can typically be used for .

• A. Denying access to untrusted users
• B. Detecting and mitigating DDoS attacks
• C. Replacing encryption as a necessary control
• D. Running an application on an endpoint without installing it

Answer: D

NEW QUESTION 4

You are the security director for a chain of automotive repair centers across several states. Your company uses a cloud SaaS provider, for business functions that cross several of the locations of your facilities, such as: 1) ordering parts 2) logistics and inventory 3) billing, and 4) marketing.
The manager at one of your newest locations reports that there is a competing car repair company that has a logo that looks almost exactly like the one your company uses. What will most likely affect the determination of who has ownership of the logo?
Response:

• A. Whoever first used the logo
• B. The jurisdiction where both businesses are using the logo simultaneously
• C. Whoever first applied for legal protection of the logo
• D. Whichever entity has the most customers that recognize the logo

Answer: C

NEW QUESTION 5

Which of the following is NOT one of the cloud computing activities, as outlined in ISO/IEC 17789? Response:

• A. Cloud service provider
• B. Cloud service partner
• C. Cloud service administrator
• D. Cloud service customer

Answer: C

NEW QUESTION 6

Which theoretical technology would allow superposition of physical states to increase both computing capacity and encryption keyspace?
Response:

• A. All-or-nothing-transform with Reed-Solomon (AONT-RS)
• B. Quantum computing
• C. Filigree investment
• D. Sharding

Answer: B

NEW QUESTION 7

Under EU law, a cloud customer who gives sensitive data to a cloud provider is still legally responsible for the damages resulting from a data breach caused by the provider; the EU would say that it is the cloud customer’s fault for choosing the wrong provider.
This is an example of insufficient ______ .

• A. Proof
• B. Evidence
• C. Due diligence
• D. Application of reasonableness

Answer: C

NEW QUESTION 8

Administrative penalties for violating the General Data Protection Regulation (GDPR) can range up to
______ .
Response:

• A. US$100,000
• B. 500,000 euros
• C. 20,000,000 euros
• D. 1,000,000 euros

Answer: C

NEW QUESTION 9

A cloud data encryption situation where the cloud customer retains control of the encryption keys and the cloud provider only processes and stores the data could be considered a ______.
Response:

• A. Threat
• B. Risk
• C. Hybrid cloud deployment model
• D. Case of infringing on the rights of the provider

Answer: C

NEW QUESTION 10

Vulnerability scans are dependent on ______ in order to function. Response:

• A. Privileged access
• B. Vulnerability signatures
• C. Malware libraries
• D. Forensic analysis

Answer: B

NEW QUESTION 11

All of the following are activities that should be performed when capturing and maintaining an accurate, secure system baseline except ______.
Response:

• A. Remove all nonessential programs from the baseline image
• B. Exclude the target system you intend to baseline from any scheduled updates/patching used inproduction systems
• C. Include the baseline image in the asset inventory/configuration management database
• D. Configure the host OS according to the baseline requirements

Answer: C

NEW QUESTION 12

All of these are reasons an organization may want to consider cloud migration except: Response:

• A. Reduced personnel costs
• B. Elimination of risks
• C. Reduced operational expenses
• D. Increased efficiency

Answer: B

NEW QUESTION 13

In general, a cloud BCDR solution will be ______ than a physical solution. Response:

• A. Slower
• B. Less expensive
• C. Larger
• D. More difficult to engineer

Answer: B

NEW QUESTION 14

The Cloud Security Alliance (CSA) Security, Trust, and Assurance Registry (STAR) program has ______ tiers.
Response:

• A. Two
• B. Three
• C. Four
• D. Eight

Answer: B

NEW QUESTION 15

What is the term used to describe loss of access to data because the cloud provider has ceased operation? Response:

• A. Closing
• B. Vendor lock-out
• C. Vendor lock-in
• D. Masking

Answer: B

NEW QUESTION 16

A user signs on to a cloud-based social media platform. In another browser tab, the user finds an article worth posting to the social media platform. The user clicks on the platform’s icon listed on the article’s website, and the article is automatically posted to the user’s account on the social media platform.
This is an example of what?
Response:

• A. Single sign-on
• B. Insecure direct identifiers
• C. Identity federation
• D. Cross-site scripting

Answer: C

NEW QUESTION 17
......