ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
Which of the following roles is responsible for creating cloud components and the testing and validation of services?
Answer: D
Just wanted to let everyone know that I passed the exam today and no questions from the 512 available were in the actual exam. While the quality of the questions here is questionable, I can tell you for sure the ones on the actual exam are serious.
Source: Adapted from community discussion — squeeze_talus0y
What is the biggest concern with hosting a key management system outside of the cloud environment?
Answer: C
Outside the cloud env could be on premise. And that does not imply loss of confidentiality. Whereas Availability of the key is always a question when needed for any operation
Source: Adapted from community discussion — echo_cert
What type of PII is controlled based on laws and carries legal penalties for noncompliance with requirements?
Answer: B
Regulated PII involves those requirements put forth by specific laws or regulations, and unlike contractual PII, where a violation can lead to contractual penalties, a violation of regulated PII can lead to fines or even criminal charges in some jurisdictions. PII regulations can depend on either the jurisdiction that applies to the hosting location or application or specific legislation based on the industry or type of data used.
Source: Adapted from community discussion — kns20
Which if the following is NOT one of the three components of a federated identity system transaction?
Answer: D
Proxy relay is not one of the three components of a federated identity system transaction. The three components of a federated identity system transaction are the user, the identity provider, and the relying party. The user is the person who is trying to access a resource, the identity provider is the entity that authenticates the user and provides identity information, and the relying party is the entity that is requesting the identity information and making the access decision. A proxy relay is not typically considered a component of a federated identity system transaction, although it may be used in some implementations to help facilitate the transaction.
Source: Adapted from community discussion — bp339
Which value refers to the amount of time it takes to recover operations in a BCDR situation to meet management's objectives?
Answer: D
The recovery time objective (RTO) is a measure of the amount of time it would take to recover operations in the event of a disaster to the point where management's objectives are met for BCDR.
Which of the cloud deployment models requires the cloud customer to be part of a specific group or organization in order to host cloud services within it?
Answer: A
A community cloud model is where customers that share a certain common bond or group membership come together to offer cloud services to their members, focused on common goals and interests.
What provides the information to an application to make decisions about the authorization level appropriate when granting access?
Answer: D
Application is the relaying party in the context of federation. The Identity Provider passes the information to the relaying party, which is the application. That's why D is correct
Source: Adapted from community discussion — keresh
What is a standard configuration and policy set that is applied to systems and virtual machines called?
Answer: B
The most common and efficient manner of securing operating systems is through the use of baselines. A baseline is a standardized and understood set of base configurations and settings. When a new system is built or a new virtual machine is established, baselines will be applied to a new image to ensure the base configuration meets organizational policy and regulatory requirements.
Which entity requires all collection and storing of data on their citizens to be done on hardware that resides within their borders?
Answer: A
Which of the cloud cross-cutting aspects relates to the ability to easily move services and applications between different cloud providers?
Answer: C
Interoperability defines how easy it is to move and reuse application components regardless of the provider, platform, OS, infrastructure, location, storage, format of data or APIs, how well applications work together, and how well new applications work with other solutions present in the business, organization, or provider’s existing architecture.
Source: Adapted from community discussion — serget12
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 1. 493 questions available.
Version 1.0.0. How we source questions