CCSP practice questions 331–340

1. Question 331 · 493 in bank

   Which protocol allows a system to use block-level storage as if it was a SAN, but over TCP network traffic instead?

   • ASATA
   • BiSCSI
   • CTLS
   • DSCSI

   Show answer

   Answer: B

   Explanation

   iSCSI is a protocol that allows for the transmission and use of SCSI commands and features over a TCP-based network. iSCSI allows systems to use block-level storage that looks and behaves as a SAN would with physical servers, but to leverage the TCP network within a virtualized environment and cloud.

   Source: Adapted from community discussion — ay_caramba24

   Next question

2. Question 332 · 493 in bank

   What is a key capability or characteristic of PaaS?

   • ASupport for a homogenous environment
   • BSupport for a single programming language
   • CAbility to reduce lock-in
   • DAbility to manually scale

   Show answer

   Answer: C

   Explanation

   The PaaS model is really use by cloud provider to develop their own solution that is a market differenciator and that's ease the lock-in. On the other hand the objective of PaaS is to give an homogenous implementation of middleware. so Answer : A

   Source: Adapted from community discussion — bessonf

   Next question

3. Question 333 · 493 in bank

   In which cloud service model is the customer required to maintain the OS?

   • AIaas
   • BCaaS
   • CPaaS
   • DSaaS

   Show answer

   Answer: A

   Explanation

   In IaaS, the service is bare metal, and the customer has to install the OS and the software; the customer then is responsible for maintaining that OS. In the other models, the provider installs and maintains the OS.

   Next question

4. Question 334 · 493 in bank

   When using a PaaS solution, what is the capability provided to the customer?

   • ATo deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The provider does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
   • BTo deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
   • CTo deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the consumer supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
   • DTo deploy onto the cloud infrastructure provider-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.

   Show answer

   Answer: B

   Explanation

   According to ג€The NIST Definition of Cloud Computing,ג€ in PaaS, ג€the capability provided to the consumer is to deploy onto the cloud infrastructure consumer- created or acquired applications created using programming languages, libraries, services, and tools supported by the provider. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.

   References

   • nist.gov documentation

   Next question

5. Question 335 · 493 in bank

   What are SOC 1/SOC 2/SOC 3?

   • AAudit reports
   • BRisk management frameworks
   • CAccess controls
   • DSoftware developments

   Show answer

   Answer: A

   Explanation

   An SOC 1 is a report on controls at a service organization that may be relevant to a user entity's internal control over financial reporting. An SOC 2 report is based on the existing SysTrust and WebTrust principles. The purpose of an SOC 2 report is to evaluate an organization's information systems relevant to security, availability, processing integrity, confidentiality, or privacy. An SOC 3 report is also based on the existing SysTrust and WebTrust principles, like a SOC 2 report. The difference is that the SOC 3 report does not detail the testing performed.

   Next question

6. Question 336 · 493 in bank

   Gathering business requirements can aid the organization in determining all of this information about organizational assets, except:

   • AFull inventory
   • BCriticality
   • CValue
   • DUsefulness

   Show answer

   Answer: D

   Explanation

   When we gather information about business requirements, we need to do a complete inventory, receive accurate valuation of assets (usually from the owners of those assets), and assess criticality; this collection of information does not tell us, objectively, how useful an asset is, however.

   Source: Adapted from community discussion — pooppants

   Next question

7. Question 337 · 493 in bank

   In attempting to provide a layered defense, the security practitioner should convince senior management to include security controls of which type?

   • APhysical
   • BAll of the above
   • Ctechnological
   • DAdministrative

   Show answer

   Answer: B

   Explanation

   Layered defense calls for a diverse approach to security.

   Source: Adapted from community discussion — kjjcraigskel

   Next question

8. Question 338 · 493 in bank

   The BIA can be used to provide information about all the following, except:

   • ABC/DR planning
   • BRisk analysis
   • CSecure acquisition
   • DSelection of security controls

   Show answer

   Answer: C

   Explanation

   The business impact analysis gathers asset valuation information that is beneficial for risk analysis and selection of security controls (it helps avoid putting the ten- dollar lock on the five-dollar bicycle), and criticality information that helps in BC/DR planning by letting the organization understand which systems, data, and personnel are necessary to continuously maintain. However, it does not aid secure acquisition efforts, since the assets examined by the BIA have already been acquired.

   Next question

9. Question 339 · 493 in bank

   Which of the following are cloud computing roles?

   • ACloud service broker and user
   • BCloud customer and financial auditor
   • CCSP and backup service provider
   • DCloud service auditor and object

   Show answer

   Answer: A

   Explanation

   Correct Answer: A Cloud Computing Roles These definitions represent the basic and most important roles within a cloud system and the relationships between them, based on ISO/IEC 17788 : • Cloud auditor An auditor that is specifically responsible for conducting audits of cloud systems and cloud applications • Cloud service broker A partner that servers as an intermediary between a cloud service customer and cloud service provider • Cloud service customer One that holds a business relationship for services with a cloud service provider • Cloud service partner One that holds a relationship with either a cloud service provider or a cloud service customer to assist with cloud services and their delivery • Cloud service provider One that offers cloud services to cloud service customers • Cloud service user One that interacts with and consumes services offered by a cloud services customer

   Source: Adapted from community discussion — ichnos

   Next question

10. Question 340 · 493 in bank

    Which of the following are considered to be the building blocks of cloud computing?

    • ACPU, RAM, storage, and networking
    • BData, CPU, RAM, and access control
    • CData, access control, virtualization, and services
    • DStorage, networking, printing, and virtualization

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSP practice, question 331. 493 questions available.