ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
Which aspect of security is DNSSEC designed to ensure?
Answer: A
The answer should be Authentication since DNSSEC authenticates responses to DNS Domain Name Look Ups. Authentication implies Integrity, but Integrity does not imply authentication.
Source: Adapted from community discussion — RadhaLaado
Which process serves to prove the identity and credentials of a user requesting access to an application or data?
Answer: B
Who would be responsible for implementing IPsec to secure communications for an application?
Answer: B
administrators = systems staff. IPSec, as far as I know, is provided at the system level, so it needs to be done by an admin.
Source: Adapted from community discussion — kepalon
What is the minimum regularity for testing a BCDR plan to meet best practices?
Answer: A
Best practices and industry standards dictate that a BCDR solution should be tested at least once a year, though specific regulatory requirements may dictate more regular testing. The BCDR plan should also be tested whenever a major modification to a system occurs.
Other than cost savings realized due to measured service, what is another facet of cloud computing that will typically save substantial costs in time and money for an organization in the event of a disaster?
Answer: C
I would have chosen Rapid elasticity, but the nearest choice is Resource pooling. Resource pooling-- is an IT term used in cloud computing environments to describe a situation in which providers serve multiple clients, customers or "tenants" with provisional and scalable services. These services can be adjusted to suit each client's needs without any changes being apparent to the client or end-user
Source: Adapted from community discussion — deegadaze1
Which of the following is NOT part of a retention policy?
Answer: B
The data retention policy covers the duration, format, technologies, protection, and accessibility of archives, but does not address the specific costs of its implementation and maintenance.
Which aspect of cloud computing would make the use of a cloud the most attractive as a BCDR solution?
Answer: D
Measured service means that costs are only incurred when a cloud customer is actually using cloud services. This is ideal for a business continuity and disaster recovery (BCDR) solution because it negates the need to keep hardware or resources on standby in case of a disaster. Services can be initiated when needed and without costs unless needed.
Which of the cloud deployment models offers the easiest initial setup and access for the cloud customer?
Answer: D
Because the public cloud model is available to everyone, in most instances all a customer will need to do to gain access is set up an account and provide a credit card number through the service's web portal. No additional contract negotiations, agreements, or specific group memberships are typically needed to get started.
Source: Adapted from community discussion — xaccan
Which of the following is NOT something that an HIDS will monitor?
Answer: B
» Host IDS (HIDS): This type of IDS operates on a single host and monitors only *network traffic* that flows into and out of that host. In addition to monitoring a host’s network traffic, HIDS are often able to monitor *critical configurations* and *files* on a host and can be configured to alert on suspicious modifications. Similar to other host-based security controls, HIDS are prone to compromise if an attacker gains root-level access on that host. To combat this, HIDS logs should immediately be sent a remote system (like your centrally managed SIEM), and HIDS configurations and settings should be locked down and managed on a remote system. Consider installing a HIDS on your baseline images for your highly sensitive systems. Configure the HIDS to communicate with your SIEM or other centrally managed alerting dashboard. You can then deploy and manage those distributed HIDS in one fell swoop.
Source: Adapted from community discussion — Seke
Which United States law is focused on data related to health records and privacy?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 91. 493 questions available.
Version 1.0.0. How we source questions