Question 281 · 493 in bank
With a federated identity system, what does the identity provider send information to after a successful authentication?
Show answer
Answer: A
ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
With a federated identity system, what does the identity provider send information to after a successful authentication?
Answer: A
Which of the following technologies is NOT commonly used for accessing systems and services in a cloud environment in a secure manner?
Answer: A
A keyboard-video-mouse (KVM) system is commonly used for directly accessing server terminals in a data center. It is not a method that would be possible within a cloud environment, primarily due to the use virtualized systems, but also because only the cloud provider's staff would be allowed the physical access to hardware systems that's provided by a KVM. Hypertext Transfer Protocol Secure (HTTPS), virtual private network (VPN), and Transport Layer Security (TLS) are all technologies and protocols that are widely used with cloud implementations for secure access to systems and services.
Which component of ITIL involves handling anything that can impact services for either internal or public users?
Answer: A
Explanation - Incident management is focused on limiting the impact of disruptions to an organization's services or operations, as well as returning their state to full operational status as soon as possible. Problem management is focused on identifying and mitigating known problems and deficiencies before they occur. Deployment management is a subcomponent of change management and is where the actual code or configuration change is put into place. Change management involves the processes and procedures that allow an organization to make changes to its IT systems and services in a controlled manner.
Source: Adapted from community discussion — stack120566
Which protocol, as a part of TLS, handles the actual secure communications and transmission of data?
Answer: D
The TLS record protocol is the actual secure communications method for transmitting data; it's responsible for encrypting and authenticating packets throughout their transmission between the parties, and in some cases it also performs compression. The TLS handshake protocol is what negotiates and establishes the TLS connection between two parties and enables the secure communications channel to then handle data transmissions. Negotiation and transfer are not protocols under TLS.
Source: Adapted from community discussion — NobleGiantz
Which of the following terms is NOT a commonly used category of risk acceptance?
Answer: D
Explanation - Accepted is not a risk acceptance category. The risk acceptance categories are minimal, low, moderate, high, and critical.
Source: Adapted from community discussion — Zeezee2
Many activities within a cloud environment are performed via programmatic means, where complex and distributed operations are handled without the need to perform each step individually. Which of the following concepts does this describe?
Answer: A
Which of the following roles involves the provisioning and delivery of cloud services?
Answer: C
The cloud service manager is responsible for the delivery of cloud services, the provisioning of cloud services, and the overall management of cloud services.
Source: Adapted from community discussion — Ajani
Being in a cloud environment, cloud customers lose a lot of insight and knowledge as to how their data is stored and their systems are deployed. Which concept from the ISO/IEC cloud standards relates to the necessity of the cloud provider to inform the cloud customer on these issues?
Answer: B
go to the CSP and they provide so much documentation on all of their services/resources. You can call it Transparency but the transparency is due to all of the documentation.
Source: Adapted from community discussion — serget12
Your IT steering committee has, at a high level, approved your project to begin using cloud services. However, the committee is concerned with getting locked into a single cloud provider and has flagged the ability to easily move between cloud providers as a top priority. It also wants to save costs by reusing components. Which cross-cutting aspect of cloud computing would be your primary focus as your project plan continues to develop and you begin to evaluate cloud providers?
Answer: D
It is A. Interoperability. I was leaning towards portability as well but this requirement - "save costs by reusing components" - is provided by interoperability, so that seems to be the correct answer.
Source: Adapted from community discussion — theyetifollowsme
Which of the following provides assurance, to a predetermined acceptable level of certainty, that an entity is indeed who they claim to be?
Answer: A
Authentication goes a step further than identification by providing a means for proving an entity's identification. Authentication is most commonly done through mechanisms such as passwords. Identification involves ascertaining who the entity is, but without a means of proving it, such as a name or user ID. Authorization occurs after authentication and sets access permissions and other privileges within a system or application for the user. Proofing is not a term that is relevant to the question.
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 281. 493 questions available.
Version 1.0.0. How we source questions