ISC CCSP Certified Cloud Security Professional (CCSP) Version: 1.1 Practice Exams

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

ISC CCSP Certified Cloud Security Professional (CCSP) Version: 1.1 Practice Exams - III

Write down your full name.

Write down your phone number.

Write down your email address.

QUESTION NO: 201 Your boss has tasked your team with getting your legacy systems and applications connected with new cloud-based services that management has decided are crucial to customer service and offerings. Which role would you be assuming under this directive?

1 point

A. Cloud service administrator

B. Cloud service user

C. Cloud service integrator

D. Cloud service business manager

Clear selection

QUESTION NO: 202 One of the main components of system audits is the ability to track changes over time and to match these changes with continued compliance and internal processes. Which aspect of cloud computing makes this particular component more challenging than in a traditional data center?

1 point

A. Portability

B. Virtualization

C. Elasticity

D. Resource pooling

Clear selection

QUESTION NO: 203 In the wake of many scandals with major corporations involving fraud and the deception of investors and regulators, which of the following laws was passed to govern accounting and financial records and disclosures?

1 point

A. GLBA

B. Safe Harbor

C. HIPAA

D. SOX

Clear selection

QUESTION NO: 204 Which one of the following threat types to applications and services involves the sending of requests that are invalid and manipulated through a user's client to execute commands on the application under the user's own credentials?

1 point

A. Injection

B. Missing function-level access control

C. Cross-site scripting

D. Cross-site request forgery

Clear selection

QUESTION NO: 205 Which cloud service category would be most ideal for a cloud customer that is developing software to test its applications among multiple hosting providers to determine the best option for its needs?

1 point

A. DaaS

B. PaaS

C. IaaS

D. SaaS

Clear selection

QUESTION NO: 206 You just hired an outside developer to modernize some applications with new web services and functionality. In order to implement a comprehensive test platform for validation, the developer needs a data set that resembles a production data set in both size and composition. In order to accomplish this, what type of masking would you use?

1 point

A. Development

B. Replicated

C. Static

D. Dynamic

Clear selection

QUESTION NO: 207 In order to prevent cloud customers from potentially consuming enormous amounts of resources within a cloud environment and thus having a negative impact on other customers, what concept is commonly used by a cloud provider?

1 point

A. Limit

B. Cap

C. Throttle

D. Reservation

Clear selection

QUESTION NO: 208 Where is a DLP solution generally installed when utilized for monitoring data at rest?

1 point

A. Network firewall

B. Host system

C. Application server

D. Database server

Clear selection

QUESTION NO: 209 Which of the following aspects of security is solely the responsibility of the cloud provider?

1 point

A. Regulatory compliance

B. Physical security

C. Operating system auditing

D. Personal security of developers

Clear selection

QUESTION NO: 210 Humidity levels for a data center are a prime concern for maintaining electrical and computing resources properly as well as ensuring that conditions are optimal for top performance. Which of the following is the optimal humidity level, as established by ASHRAE?

1 point

A. 20 to 40 percent relative humidity

B. 50 to 75 percent relative humidity

C. 40 to 60 percent relative humidity

D. 30 to 50 percent relative humidity

Clear selection

Clear form

Never submit passwords through Google Forms.

This content is neither created nor endorsed by Google. Report Abuse - Terms of Service - Privacy Policy

Forms