ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
There are many situations when testing a BCDR plan is appropriate or mandated. Which of the following would not be a necessary time to test a BCDR plan?
Answer: A
B is correct, you'd have to update the BCP/DR plan when some software changes are made, however you won't need to retest it after every software change.
Source: Adapted from community discussion — Zeezee2
Key maintenance and security are paramount within a cloud environment due to the widespread use of encryption for both data and transmissions. Which of the following key-management systems would provide the most robust control over and ownership of the key-management processes for the cloud customer?
Answer: C
A remote key management system resides away from the cloud environment and is owned and controlled by the cloud customer. With the use of a remote service, the cloud customer can avoid being locked into a proprietary system from the cloud provider, but also must ensure that service is compatible with the services offered by the cloud provider. A local key management system resides on the actual servers using the keys, which does not provide optimal security or control over them. Both the terms internal key management service and client key management service are provided as distractors.
Source: Adapted from community discussion — Pegasus_orb
Security is a critical yet often overlooked consideration for BCDR planning. At which stage of the planning process should security be involved?
Answer: A
Defining the scope of the plan is the very first step in the overall process. Security should be included from the very earliest stages and throughout the entire process. Bringing in security at a later stage can lead to additional costs and time delays to compensate for gaps in planning. Risk assessment, requirements gathering, and analysis are all later steps in the process, and adding in security at any of those points can potentially cause increased costs and time delays.
Source: Adapted from community discussion — Sa007788
Which aspect of cloud computing will be most negatively impacted by vendor lock-in?
Answer: D
To mitigate negative impacts, carefully evaluate and plan for a future need to change, try not use proprietary file formats, maintain organically internal backups that can be used for migration, and consider a multi-cloud infrastructure.
Source: Adapted from community discussion — Lenell
Which of the following statements about Type 1 hypervisors is true?
Answer: A
and the answer is not correct. Type 1 hypervisor can be installed directly to different types of hardware, and normally type 1 hypervisors vendors, like cytrix and vmware do not produce hardware
Source: Adapted from community discussion — gjjw
Which format is the most commonly used standard for exchanging information within a federated identity system?
Answer: C
Security Assertion Markup Language (SAML) is the most common data format for information exchange within a federated identity system. It is used to transmit and exchange authentication and authorization data.XML is similar to SAML, but it's used for general-purpose data encoding and labeling and is not used for the exchange of authentication and authorization data in the way that SAML is for federated systems. JSON is used similarly to XML, as a text-based data exchange format that typically uses attribute-value pairings, but it's not used for authentication and authorization exchange. HTML is used only for encoding web pages for web browsers and is not used for data exchange--and certainly not in a federated system.
Which ITIL component is focused on anticipating predictable problems and ensuring that configurations and operations are in place to prevent these problems from ever occurring?
Answer: D
Which of the following areas of responsibility would be shared between the cloud customer and cloud provider within the Software as a Service (SaaS) category?
Answer: C
With SaaS, the application is a shared responsibility between the cloud provider and cloud customer. Although the cloud provider is responsible for deploying, maintaining, and securing the application, the cloud customer does carry some responsibility for the configuration of users and options. Regardless of the cloud service category used, the physical environment is always the sole responsibility of the cloud provider. With all cloud service categories, the data and governance are always the sole responsibility of the cloud customer.
When a system needs to be exposed to the public Internet, what type of secure system would be used to perform only the desired operations?
Answer: D
With the rapid emergence of cloud computing, very few regulations were in place that pertained to it specifically, and organizations often had to resort to using a collection of regulations that were not specific to cloud in order to drive audits and policies. Which standard from the ISO/IEC was designed specifically for cloud computing?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 231. 493 questions available.
Version 1.0.0. How we source questions