CCSP practice questions 201–210

1. Question 201 · 493 in bank

   Which phase of the cloud data lifecycle represents the first instance where security controls can be implemented?

   • AUse
   • BShare
   • CStore
   • DCreate

   Show answer

   Answer: D

   Explanation

   Create phase is the correct answer. "Security controls can be initially implemented at the Create phase as well, specifically in the form of technologies such as Secure Sockets Layer (SSL) and Transport Layer Security (TLS) with data that is inputted or imported." Carter, Daniel. CCSP Certified Cloud Security Professional All-in-One Exam Guide, Third Edition (p. 90). McGraw Hill LLC. Kindle Edition.

   Source: Adapted from community discussion — Loveguitar

   Next question

2. Question 202 · 493 in bank

   You were recently hired as a project manager at a major university to implement cloud services for the academic and administrative systems. Because the load and demand for services at a university are very cyclical in nature, commensurate with the academic calendar, which of the following aspects of cloud computing would NOT be a primary benefit to you?

   • AMeasured service
   • BBroad network access
   • CResource pooling
   • DOn-demand self-service

   Show answer

   Answer: B

   Explanation

   Broad network access to cloud services, although it is an integral aspect of cloud computing, would not being a specific benefit to an organization with cyclical business needs. The other options would allow for lower costs during periods of low usage as well as provide the ability to expand services quickly and easily when needed for peak periods. Measured service allows a cloud customer to only use the resources it needs at the time, and resource pooling allows a cloud customer to access resources as needed. On-demand self-service enables the cloud customer to change its provisioned resources on its own, without the need to interact with the staff from the cloud provider.

   Source: Adapted from community discussion — Guivent

   Next question

3. Question 203 · 493 in bank

   Which cloud deployment model is MOST likely to offer free or very cheap services to users?

   • AHybrid
   • BCommunity
   • CPublic
   • DPrivate

   Show answer

   Answer: C

   Explanation

   Public clouds offer services to anyone, regardless of affiliation, and are the most likely to offer free services to users. Examples of public clouds with free services include iCloud, Dropbox, and OneDrive. Private cloud models are designed for specific customers and for their needs, and would not offer services to the public at large, for free or otherwise. A community cloud is specific to a group of similar organizations and would not offer free or widely available public services. A hybrid cloud model would not fit the specifics of the question.

   Next question

4. Question 204 · 493 in bank

   Where is a DLP solution generally installed when utilized for monitoring data in transit?

   • ANetwork perimeter
   • BDatabase server
   • CApplication server
   • DWeb server

   Show answer

   Answer: A

   Next question

5. Question 205 · 493 in bank

   With IaaS, what is responsible for handling the security and control over the volume storage space?

   • AManagement plane
   • BOperating system
   • CApplication
   • DHypervisor

   Show answer

   Answer: B

   Next question

6. Question 206 · 493 in bank

   Configurations and policies for a system can come from a variety of sources and take a variety of formats. Which concept pertains to the application of a set of configurations and policies that is applied to all systems or a class of systems?

   • AHardening
   • BLeveling
   • CBaselines
   • DStandards

   Show answer

   Answer: C

   Explanation

   Baselines are a set of configurations and policies applied to all new systems or services, and they serve as the basis for deploying any other services on top of them. Although standards often form the basis for baselines, the term is applicable in this case. Hardening is the process of securing a system, often through the application of baselines. Leveling is an extraneous but similar term to baselining.

   Next question

7. Question 207 · 493 in bank

   Which of the following tasks within a SaaS environment would NOT be something the cloud customer would be responsible for?

   • AAuthentication mechanism
   • BBranding
   • CTraining
   • DUser access

   Show answer

   Answer: A

   Explanation

   The authentication mechanisms and implementations are the responsibility of the cloud provider because they are core components of the application platform and service. Within a SaaS implementation, the cloud customer will provision user access, deploy branding to the application interface (typically), and provide or procure training for its users.

   Next question

8. Question 208 · 493 in bank

   An SLA contains the official requirements for contract performance and satisfaction between the cloud provider and cloud customer. Which of the following would NOT be a component with measurable metrics and requirements as part of an SLA?

   • ANetwork
   • BUsers
   • CMemory
   • DCPU

   Show answer

   Answer: B

   Explanation

   Dealing with users or user access would not be an appropriate item for inclusion in an SLA specifically. However, user access and user experience would be covered indirectly through other metrics. Memory, CPU, and network resources are all typically included within an SLA for availability and response times when dealing with any incidents.

   Next question

9. Question 209 · 493 in bank

   Within a federated identity system, which of the following would you be MOST likely to use for sending information for consumption by a relying party?

   • AXML
   • BHTML
   • CWS-Federation
   • DSAML

   Show answer

   Answer: D

   Explanation

   The Security Assertion Markup Language (SAML) is the most widely used method for encoding and sending attributes and other information from an identity provider to a relying party.WS-Federation, which is used by Active Directory Federation Services (ADFS), is the second most used method for sending information to a relying party, but it is not a better choice than SAML. XML is similar to SAML in the way it encodes and labels data, but it does not have all of the required extensions that SAML does. HTML is not used within federated systems at all.

   Next question

10. Question 210 · 493 in bank

    Which data state would be most likely to use digital signatures as a security protection mechanism?

    • AData in use
    • BData in transit
    • CArchived
    • DData at rest

    Show answer

    Answer: A

    Explanation

    Digital signatures are most likely to be used as a security protection mechanism for data that is in a "transmitted" state. This is because digital signatures provide a way to ensure the integrity and authenticity of data during transmission, which is particularly important when data is being sent over an insecure network such as the internet. Digital signatures work by using cryptography to create a unique "signature" of the data that can be verified by the recipient to ensure that the data has not been tampered with or altered during transmission. This helps to prevent unauthorized access, interception, or modification of the data while it is in transit. In contrast, digital signatures may not be as necessary for data that is in a "stored" state, such as data that is saved on a secure server or database. In this case, other security mechanisms such as access controls, encryption, and backups may be more important for protecting the data.

    Source: Adapted from community discussion — ikamalbhatt

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSP practice, question 201. 493 questions available.