CCSP | What Virtual CCSP Testing Software Is

NEW QUESTION 1

______ is the most prevalent protocol used in identity federation.

• A. HTTP
• B. SAML
• C. FTP
• D. WS-Federation

Answer: B

NEW QUESTION 2

Which of the following aspects of the BC/DR process poses a risk to the organization? Response:

• A. Threat intelligence gathering
• B. Preplacement of response assets
• C. Budgeting for disaster
• D. Full testing of the plan

Answer: D

NEW QUESTION 3

When considering the option to migrate from an on-premises environment to a hosted cloud service, an organization should weigh the risks of allowing external entities to access the cloud data for collaborative purposes against ______.
Response:

• A. Not securing the data in the legacy environment
• B. Disclosing the data publicly
• C. Inviting external personnel into the legacy workspace in order to enhance collaboration
• D. Sending the data outside the legacy environment for collaborative purposes

Answer: D

NEW QUESTION 4

Single sign-on systems work by authenticating users from a centralized location or using a centralized method, and then allowing applications that trust the system to grant those users access. What would be passed between the authentication system and the applications to grant a user access?
Response:

• A. Ticket
• B. Certificate
• C. Credential
• D. Token

Answer: D

NEW QUESTION 5

Federation allows ______ across organizations.
Response:

• A. Role replication
• B. Encryption
• C. Policy
• D. Access

Answer: D

NEW QUESTION 6

Which of the following practices can enhance both operational capabilities and configuration management efforts?
Response:

• A. Regular backups
• B. Constant uptime
• C. Multifactor authentication
• D. File hashes

Answer: D

NEW QUESTION 7

Designers making applications for the cloud have to take into consideration risks and operational constraints that did not exist or were not as pronounced in the legacy environment.
Which of the following is an element cloud app designers may have to consider incorporating in software for the cloud that might not have been as important in the legacy environment?
Response:

• A. IAM capability
• B. DDoS resistance
• C. Encryption for data at rest and in motion
• D. Field validation

Answer: C

NEW QUESTION 8

The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing.
According to the CSA, what is one reason the threat of insecure interfaces and APIs is so prevalent in cloud computing?
Response:

• A. Cloud customers and third parties are continually enhancing and modifying APIs.
• B. APIs can have automated settings.
• C. It is impossible to uninstall APIs.
• D. APIs are a form of malware.

Answer: A

NEW QUESTION 9

What aspect of data center planning occurs first? Response:

• A. Logical design
• B. Physical design
• C. Audit
• D. Policy revision

Answer: B

NEW QUESTION 10

Which kind of SSAE report comes with a seal of approval from a certified auditor? Response:

• A. SOC 1
• B. SOC 2
• C. SOC 3
• D. SOC 4

Answer: C

NEW QUESTION 11

From a security perspective, automation of configuration aids in ______.
Response:

• A. Enhancing performance
• B. Reducing potential attack vectors
• C. Increasing ease of use of the systems
• D. Reducing need for administrative personnel

Answer: B

NEW QUESTION 12

Which of the following methods is often used to obscure data from production systems for use in test or development environments?
Response:

• A. Tokenization
• B. Encryption
• C. Masking
• D. Classification

Answer: C

NEW QUESTION 13

Which of the following is NOT a core component of an SIEM solution? Response:

• A. Correlation
• B. Aggregation
• C. Compliance
• D. Escalation

Answer: D

NEW QUESTION 14

What is the primary security mechanism used to protect SOAP and REST APIs? Response:

• A. Firewalls
• B. XML firewalls
• C. Encryption
• D. WAFs

Answer: C

NEW QUESTION 15

Which of the following is the correct name for Tier II of the Uptime Institute Data Center Site Infrastructure Tier Standard Topology?
Response:

• A. Concurrently Maintainable Site Infrastructure
• B. Fault-Tolerant Site Infrastructure
• C. Basic Site Infrastructure
• D. Redundant Site Infrastructure Capacity Components

Answer: D

NEW QUESTION 16

You have been tasked by management to offload processing and validation of incoming encoded data from your application servers and their associated APIs. Which of the following would be the most appropriate device or software to consider?
Response:

• A. XML accelerator
• B. XML firewall
• C. Web application firewall
• D. Firewall

Answer: A

NEW QUESTION 17
......