ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
When reviewing the BIA after a cloud migration, the organization should take into account new factors related to data breach impacts. One of these new factors is:
Answer: D
State notification laws and the loss of proprietary data/intellectual property pre-existed the cloud; only the lack of ability to transfer liability is new.
What is the term we use to describe the general ease and efficiency of moving data from one cloud provider either to another cloud provider or down from the cloud?
Answer: D
Elasticity is the name for the benefit of cloud computing where resources can be apportioned as necessary to meet customer demand. Obfuscation is a technique to hide full raw datasets, either from personnel who do not have need to know or for use in testing. Mobility is not a term pertinent to the CBK.
Countermeasures for protecting cloud operations against internal threats include all of the following except:
Answer: D
Conflict of interest is a threat, not a control.
Source: Adapted from community discussion — xaccan
The cloud customer will have the most control of their data and systems, and the cloud provider will have the least amount of responsibility, in which cloud computing arrangement?
Answer: A
IaaS entails the cloud customer installing and maintaining the OS, programs, and data; PaaS has the customer installing programs and data; in SaaS, the customer only uploads data. In a community cloud, data and device owners are distributed.
Countermeasures for protecting cloud operations against external attackers include all of the following except:
Answer: B
User access to the cloud environment can be administered in all of the following ways except:
Answer: D
Which of the following threat types involves the sending of untrusted data to a user's browser to be executed with their own credentials and access?
Answer: B
This is 100% cross site request forgery.... the basic way it works is someone sends you a link to execute commands on a website you are already authenticated with (hence it runs with users credentials being the key)
Source: Adapted from community discussion — Fpaul
Each of the following are dependencies that must be considered when reviewing the BIA after cloud migration except:
Answer: C
The cloud provider's resellers are a marketing and sales mechanism, not an operational dependency that could affect the security of a cloud customer.
Because of multitenancy, specific risks in the public cloud that don't exist in the other cloud service models include all the following except:
Answer: A
I'm not disagreeing with the answer, but escalation of privilege also exists in traditional environments. Escalation of privileges is a very standard phase of a pen test.
Source: Adapted from community discussion — Buttersfolife
What is the cloud service model in which the customer is responsible for administration of the OS?
Answer: D
In IaaS, the cloud provider only owns the hardware and supplies the utilities. The customer is responsible for the OS, programs, and data. In PaaS and SaaS, the provider also owns the OS. There is no QaaS. That is a red herring.
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 381. 493 questions available.
Version 1.0.0. How we source questions