ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
All policies within the organization should include a section that includes all of the following, except:
Answer: A
All the elements except adjudication need to be addressed in each policy. Adjudication is not an element of policy.
Proper implementation of DLP solutions for successful function requires which of the following?
Answer: C
DLP tools need to be aware of which information to monitor and which requires categorization (usually done upon data creation, by the data owners). DLPs can be implemented with or without physical access or presence. USB connectivity has nothing to do with DLP solutions.
Why does a Type 2 hypervisor typically offer less security control than a Type 1 hypervisor?
Answer: A
A Type 2 hypervisor differs from a Type 1 hypervisor in that it runs on top of another operating system rather than directly tied into the underlying hardware of the virtual host servers. With this type of implementation, additional security and architecture concerns come into play because the interaction between the operating system and the hypervisor becomes a critical link. The hypervisor no longer has direct interaction and control over the underlying hardware, which means that some performance will be lost due to the operating system in the middle needing its own resources, patching requirements, and operational oversight.
Source: Adapted from community discussion — akg001
What is the experimental technology that might lead to the possibility of processing encrypted data without having to decrypt it first?
Answer: D
AES is an encryption standard. Link encryption is a method for protecting communications traffic. One-time pads are an encryption method.
Data labels could include all the following, except:
Answer: A
All the others might be included in data labels, but multifactor authentication is a procedure used for access control, not a label.
In the cloud motif, the data owner is usually:
Answer: C
The data owner is usually considered the cloud customer in a cloud configuration; the data in question is the customer's information, being processed in the cloud. The cloud provider is only leasing services and hardware to the customer. The cloud access security broker (CASB) only handles access control on behalf of the cloud customer, and is not in direct contact with the production data.
The goals of DLP solution implementation include all of the following, except:
Answer: D
DLP does not have anything to do with elasticity, which is the capability of the environment to scale up or down according to demand. All the rest are goals of DLP implementations.
Source: Adapted from community discussion — kjjcraigskel
What is the intellectual property protection for a useful manufacturing innovation?
Answer: C
The most pragmatic option for data disposal in the cloud is which of the following?
Answer: A
We don't have physical ownership, control, or even access to the devices holding the data, so physical destruction, including melting, is not an option. Overwriting is a possibility, but it is complicated by the difficulty of locating all the sectors and storage areas that might have contained our data, and by the likelihood that constant backups in the cloud increase the chance we'll miss something as it's being overwritten. Cryptoshredding is the only reasonable alternative. Cold fusion is a red herring.
In the cloud motif, the data processor is usually:
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 351. 493 questions available.
Version 1.0.0. How we source questions