CCSP practice questions 101–110

1. Question 101 · 493 in bank

   Which of the following technologies is used to monitor network traffic and notify if any potential threats or attacks are noticed?

   • AIPS
   • BWAF
   • CFirewall
   • DIDS

   Show answer

   Answer: D

   Explanation

   An intrusion detection system (IDS) is designed to analyze network packets, compare their contents or characteristics against a set of configurations or signatures, and alert personnel if anything is detected that could constitute a threat or is otherwise designated for alerting.

   Source: Adapted from community discussion — Ahbey_911

   Next question

2. Question 102 · 493 in bank

   What concept does the "A" represent in the DREAD model?

   • AAffected users
   • BAuthentication
   • CAffinity
   • DAuthorization

   Show answer

   Answer: A

   Explanation

   Damage – how bad would an attack be? Reproducibility – how easy is it to reproduce the attack? Exploitability – how much work is it to launch the attack? Affected users – how many people will be impacted? Discoverability – how easy is it to discover the threat?

   Source: Adapted from community discussion — budjones

   Next question

3. Question 103 · 493 in bank

   Which attribute of data poses the biggest challenge for data discovery?

   • ALabels
   • BQuality
   • CVolume
   • DFormat

   Show answer

   Answer: C

   Explanation

   The main problem when it comes to data discovery is the quality of the data that analysis is being performed against. Data that is malformed, incorrectly stored or labeled, or incomplete makes it very difficult to use analytical tools against.

   Source: Adapted from community discussion — AlanJP

   Next question

4. Question 104 · 493 in bank

   What does static application security testing (SAST) offer as a tool to the testers?

   • AProduction system scanning
   • BInjection attempts
   • CSource code access
   • DLive testing

   Show answer

   Answer: C

   Explanation

   Static application security testing (SAST) is conducted with knowledge of the system, including source code, and is done against offline systems.

   Source: Adapted from community discussion — xav1er

   Next question

5. Question 105 · 493 in bank

   Which of the following service capabilities gives the cloud customer an established and maintained framework to deploy code and applications?

   • ASoftware
   • BDesktop
   • CPlatform
   • DInfrastructure

   Show answer

   Answer: C

   Explanation

   The platform service capability provides programming languages and libraries from the cloud provider, where the customer can deploy their own code and applications into a managed and controlled framework.

   Next question

6. Question 106 · 493 in bank

   What process is used within a cloud environment to maintain resource balancing and ensure that resources are available where and when needed?

   • ADynamic clustering
   • BDynamic balancing
   • CDynamic resource scheduling
   • DDynamic optimization

   Show answer

   Answer: D

   Explanation

   Another question seemed to refer to Dynamic Resource Scheduling though, with following explanation: Dynamic resource scheduling (DRS) is used within all clustering systems as the method for clusters to provide high availability, scaling, management, and workload distribution and balancing of jobs and processes. From a physical infrastructure perspective, DRS is used to balance compute loads between physical hosts in a cloud to maintain the desired thresholds and limits on the physical hosts.

   Source: Adapted from community discussion — Zeezee2

   Next question

7. Question 107 · 493 in bank

   Which value refers to the percentage of production level restoration needed to meet BCDR objectives?

   • ARPO
   • BRTO
   • CRSL
   • DSRE

   Show answer

   Answer: C

   Explanation

   RSL - percentage of the total production service level that has to be restored to meet the BCDR objectives (correct) RPO - determines the maximum acceptable amount of data loss measured in time (Incorrect)

   Source: Adapted from community discussion — Ahbey_911

   Next question

8. Question 108 · 493 in bank

   Over time, what is a primary concern for data archiving?

   • ASize of archives
   • BFormat of archives
   • CRecoverability
   • DRegulatory changes

   Show answer

   Answer: C

   Next question

9. Question 109 · 493 in bank

   What is an often overlooked concept that is essential to protecting the confidentiality of data?

   • AStrong password
   • BTraining
   • CSecurity controls
   • DPolicies

   Show answer

   Answer: B

   Explanation

   While the main focus of confidentiality revolves around technological requirements or particular security methods, an important and often overlooked aspect of safeguarding data confidentiality is appropriate and comprehensive training for those with access to it. Training should be focused on the safe handling of sensitive information overall, including best practices for network activities as well as physical security of the devices or workstations used to access the application.

   Next question

10. Question 110 · 493 in bank

    Which of the cloud deployment models offers the most control and input to the cloud customer as to how the overall cloud environment is implemented and configured?

    • APublic
    • BCommunity
    • CHybrid
    • DPrivate

    Show answer

    Answer: D

    Explanation

    A private cloud model, and the specific contractual relationships involved, will give a cloud customer the most level of input and control over how the overall cloud environment is designed and implemented. This would be even more so in cases where the private cloud is owned and operated by the same organization that is hosting services within it.

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSP practice, question 101. 493 questions available.