CCSP practice questions 321–330

1. Question 321 · 493 in bank

   What type of solution is at the core of virtually all directory services?

   • AWS
   • BLDAP
   • CADFS
   • DPKI

   Show answer

   Answer: B

   Explanation

   The Lightweight Directory Access Protocol (LDAP) forms the basis of virtually all directory services, regardless of the specific vendor or software package.WS is a protocol for information exchange between two systems and does not actually store the data. ADFS is a Windows component for enabling single sign-on for the operating system and applications, but it relies on data from an LDAP server. PKI is used for managing and issuing security certificates.

   Next question

2. Question 322 · 493 in bank

   The different cloud service models have varying levels of responsibilities for functions and operations depending with the model's level of service. In which of the following models would the responsibility for patching lie predominantly with the cloud customer?

   • ADaaS
   • BSaaS
   • CPaaS
   • DIaaS

   Show answer

   Answer: D

   Explanation

   With Infrastructure as a Service (IaaS), the cloud customer is responsible for deploying and maintaining its own systems and virtual machines. Therefore, the customer is solely responsible for patching and any other security updates it finds necessary. With Software as a Service (SaaS), Platform as a Service (PaaS), and Desktop as a Service (DaaS), the cloud provider maintains the infrastructure components and is responsible for maintaining and patching them.

   Next question

3. Question 323 · 493 in bank

   Which component of ITIL involves the creation of an RFC ticket and obtaining official approvals for it?

   • AProblem management
   • BRelease management
   • CDeployment management
   • DChange management

   Show answer

   Answer: D

   Explanation

   The change management process involves the creation of the official Request for Change (RFC) ticket, which is used to document the change, obtain the required approvals from management and stakeholders, and track the change to completion. Release management is a subcomponent of change management, where the actual code or configuration change is put into place. Deployment management is similar to release management, but it's where changes are actually implemented on systems. Problem management is focused on the identification and mitigation of known problems and deficiencies before they are able to occur.

   Next question

4. Question 324 · 493 in bank

   Which of the following are attributes of cloud computing?

   • AMinimal management effort and shared resources
   • BHigh cost and unique resources
   • CRapid provisioning and slow release of resources
   • DLimited access and service provider interaction

   Show answer

   Answer: A

   Explanation

   Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.

   Next question

5. Question 325 · 493 in bank

   In a cloud environment, encryption should be used for all the following, except:

   • ASecure sessions/VPN
   • BLong-term storage of data
   • CNear-term storage of virtualized images
   • DProfile formatting

   Show answer

   Answer: D

   Explanation

   All of these activities should incorporate encryption, except for profile formatting, which is a made-up term.

   Next question

6. Question 326 · 493 in bank

   Which of the following is considered a technological control?

   • AFirewall software
   • BFiring personnel
   • CFireproof safe
   • DFire extinguisher

   Show answer

   Answer: A

   Explanation

   A firewall is a technological control. The safe and extinguisher are physical controls and firing someone is an administrative control.

   Next question

7. Question 327 · 493 in bank

   When using an IaaS solution, what is the capability provided to the customer?

   • ATo provision processing, storage, networks, and other fundamental computing resources when the consumer is able to deploy and run arbitrary software, which can include OSs and applications.
   • BTo provision processing, storage, networks, and other fundamental computing resources when the auditor is able to deploy and run arbitrary software, which can include OSs and applications.
   • CTo provision processing, storage, networks, and other fundamental computing resources when the provider is able to deploy and run arbitrary software, which can include OSs and applications.
   • DTo provision processing, storage, networks, and other fundamental computing resources when the consumer is not able to deploy and run arbitrary software, which can include OSs and applications.

   Show answer

   Answer: A

   Explanation

   According to ג€The NIST Definition of Cloud Computing,ג€ in IaaS, ג€the capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, and deployed applications; and possibly limited control of select networking components (e.g., host firewalls).

   Next question

8. Question 328 · 493 in bank

   When using an IaaS solution, what is a key benefit provided to the customer?

   • AMetered and priced on the basis of units consumed
   • BIncreased energy and cooling system efficiencies
   • CTransferred cost of ownership
   • DThe ability to scale up infrastructure services based on projected usage

   Show answer

   Answer: C

   Explanation

   I worry this question or answer is wrong. Thn question might originally asks for the "exception", or the answer is C. The current answer explanation shows four IaaS merits w/o the priority, whch out of three of them are in the choices. Also, in the (ISC)2 official app has a question as below, which suggest the ownership cost transfer is the best merit of the IaaS: When using an Infrastructure as a Service (IaaS) solution, what is the key benefit for the customer? (A) Scalability (B) Metered service (C) Energy and cooling efficiencies (D) Transfer of ownership cost Explanation D. The primary benefit to the customer of using Infrastructure as a Service (IaaS) is the transfer of cost of ownership. In a cloud environment, the customer uses and is billed only for what they use as opposed to the full cost of implementation, saving them a significant amount in terms of cost of ownership. While scalability, metered service, and energy and cooling efficiencies are a part of the benefit of a cloud computing environment, they are not the primary benefit or business driver behind Infrastructure as a Service (IaaS) adoption.

   Source: Adapted from community discussion — Guest4768

   Next question

9. Question 329 · 493 in bank

   Which of the following is considered an administrative control?

   • AKeystroke logging
   • BAccess control process
   • CDoor locks
   • DBiometric authentication

   Show answer

   Answer: B

   Explanation

   A process is an administrative control; sometimes, the process includes elements of other types of controls (in this case, the access control mechanism might be a technical control, or it might be a physical control), but the process itself is administrative. Keystroke logging is a technical control (or an attack, if done for malicious purposes, and not for auditing); door locks are a physical control; and biometric authentication is a technological control.

   Next question

10. Question 330 · 493 in bank

    Which of the following concepts refers to a cloud customer paying only for the resources and offerings they use within a cloud environment, and only for the duration that they are consuming them?

    • AConsumable service
    • BMeasured service
    • CBillable service
    • DMetered service

    Show answer

    Answer: B

    Explanation

    measured service is the correct answer, it is about the "proper" term used in the way to define the benefits of cloud. Always remember it's a "measured service in a metered way"

    Source: Adapted from community discussion — vega

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSP practice, question 321. 493 questions available.