Question 221 · 493 in bank
Where is an XML firewall most commonly and effectively deployed in the environment?
Show answer
Answer: D
ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
Where is an XML firewall most commonly and effectively deployed in the environment?
Answer: D
Which of the following is not a component of contractual PII?
Answer: B
Contractual PII components are as follows: (correct answer is B) Scope of processing Use of Subcontractors Removal/deletion of data Appropriate/Required data security controls Locations of Data Return of data/restitution of data Audits/right to audit subcontractors
Source: Adapted from community discussion — estarisbourne
Which of the following security measures done at the network layer in a traditional data center are also applicable to a cloud environment?
Answer: B
Trust zones can be implemented to separate systems or tiers along logical lines for great security and access controls. Each zone can then have its own security controls and monitoring based on its particular needs.
Modern web service systems are designed for high availability and resiliency. Which concept pertains to the ability to detect problems within a system, environment, or application and programmatically invoke redundant systems or processes for mitigation?
Answer: C
Fault tolerance allows a system to continue functioning, even with degraded performance, if portions of it fail or degrade, without the entire system or service being taken down. It can detect problems within a service and invoke compensating systems or functions to keep functionality going. Although redundancy is similar to fault tolerance, it is more focused on having additional copies of systems available, either active or passive, that can take up services if one system goes down. Elasticity pertains to the ability of a system to resize to meet demands, but it is not focused on system failures. Automation, and its role in maintaining large systems with minimal intervention, is not directly related to fault tolerance.
On large distributed systems with pooled resources, cloud computing relies on extensive orchestration to maintain the environment and the constant provisioning of resources. Which of the following is crucial to the orchestration and automation of networking resources within a cloud?
Answer: D
BCDR strategies do not typically involve the entire operations of an organization, but only those deemed critical to their business. Which concept pertains to the amount of services that need to be recovered to meet BCDR objectives?
Answer: A
The recovery service level (RSL) measures the percentage of operations that would be recovered during a BCDR situation. The recovery point objective (RPO) sets and defines the amount of data an organization must have available or accessible to reach the determined level of operations necessary during a BCDR situation. The recovery time objective (RTO) measures the amount of time necessary to recover operations to meet the BCDR plan. SRE is provided as an erroneous response.
During the course of an audit, which of the following would NOT be an input into the control requirements used as part of a gap analysis.
Answer: C
Vendor recommendations would not be pertinent to the gap analysis after an audit. Although vendor recommendations will typically play a role in the development of corporate policies or contractual requirements, they are not required. Regulations, corporate policy, and contractual requirements all determine the expected or mandated controls in place on a system.
The GAPP framework was developed through a joint effort between the major Canadian and American professional accounting associations in order to assist their members with managing and preventing risks to the privacy of their data and customers. Which of the following is the meaning of GAPP?
Answer: C
Which protocol operates at the network layer and provides for full point-to-point encryption of all communications and transmissions?
Answer: A
The answer reasoning specifically states why VPN is NOT the right answer: "Although a VPN allows a secure channel for communications into a private network from an outside location, it's not a protocol." The question is asking which "protocol" would be used, not technology. Therefore the only right answer is IPsec
Source: Adapted from community discussion — Xindydo
When data discovery is undertaken, three main approaches or strategies are commonly used to determine what the type of data, its format, and composition are for the purposes of classification. Which of the following is NOT one of the three main approaches to data discovery?
Answer: B
Hashing would render the data unreadable and unable to revert back to original state. So we would not be able to perform data discovery.
Source: Adapted from community discussion — Bill_nye_russian_guy
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 221. 493 questions available.
Version 1.0.0. How we source questions