CCSP practice questions 31–40

1. Question 31 · 493 in bank

   Which security concept is based on preventing unauthorized access to data while also ensuring that it is accessible to those authorized to use it?

   • AIntegrity
   • BAvailability
   • CConfidentiality
   • DNonrepudiation

   Show answer

   Answer: C

   Explanation

   what a messy question preventing unauthorized access to data --> C confidentiality ensuring that it is accessible to those authorized to use it --> B Availability looks like we have to guess between B and C. As CSSP is more security oriented, i am for C

   Source: Adapted from community discussion — xroxro

   Next question

2. Question 32 · 493 in bank

   Which of the following is NOT a domain of the Cloud Controls Matrix (CCM)?

   • AData center security
   • BHuman resources
   • CMobile security
   • DBudgetary and cost controls

   Show answer

   Answer: D

   Explanation

   The domains covered in the new Cloud Controls Matrix (CCM) v4 are: Application & Interface Security Audit and Assurance Business Continuity Mgmt & Op Resilience Change Control & Configuration Management Data Security and Privacy - DSP (old DSI) Datacenter Security Cryptography, Encryption and Key Management Governance, Risk Management and Compliance Human Resources Security Identity & Access Management Infrastructure & Access Management Infrastructure & Virtualization Interoperability & Portability • Universal EndPoint Management Security Incident Management, E-Discovery & Cloud Forensics Supply Chain Management, Transparency & Accountability Threat & Vulnerability Management Logging and Monitoring

   Source: Adapted from community discussion — xaccan

   Next question

3. Question 33 · 493 in bank

   Which security concept, if implemented correctly, will protect the data on a system, even if a malicious actor gains access to the actual system?

   • ASandboxing
   • BEncryption
   • CFirewalls
   • DAccess control

   Show answer

   Answer: B

   Next question

4. Question 34 · 493 in bank

   Which of the following is the sole responsibility of the cloud provider, regardless of which cloud model is used?

   • APlatform
   • BData
   • CPhysical environment
   • DInfrastructure

   Show answer

   Answer: C

   Explanation

   Infrastructure and platform is what service provider can still provide but they can be provided by IaaS and PaaS providers. But the physical environment could could not be provided by any other person other than the service provider

   Source: Adapted from community discussion — Joadeika

   Next question

5. Question 35 · 493 in bank

   What does the management plane typically utilize to perform administrative functions on the hypervisors that it has access to?

   • AScripts
   • BRDP
   • CAPIs
   • DXML

   Show answer

   Answer: C

   Explanation

   The functions of the management plane are typically exposed as a series of remote calls and function executions and as a set of APIs. These APIs are typically leveraged through either a client or a web portal, with the latter being the most common.

   Source: Adapted from community discussion — lmpdlnar

   Next question

6. Question 36 · 493 in bank

   Which of the following is NOT a factor that is part of a firewall configuration?

   • AEncryption
   • BPort
   • CProtocol
   • DSource IP

   Show answer

   Answer: A

   Next question

7. Question 37 · 493 in bank

   Which of the cloud deployment models involves spanning multiple cloud environments or a mix of cloud hosting models?

   • ACommunity
   • BPublic
   • CHybrid
   • DPrivate

   Show answer

   Answer: C

   Explanation

   Although Hybrid would often indicate a mixture of on-prem and cloud. It still can also be between different cloud environments

   Source: Adapted from community discussion — BossUK

   Next question

8. Question 38 · 493 in bank

   Which of the following is NOT one of five principles of SOC Type 2 audits?

   • APrivacy
   • BProcessing integrity
   • CFinancial
   • DSecurity

   Show answer

   Answer: C

   Explanation

   The SOC Type 2 audits include five principles: security, privacy, processing integrity, availability, and confidentiality.

   Source: Adapted from community discussion — xaccan

   Next question

9. Question 39 · 493 in bank

   Which aspect of cloud computing makes data classification even more vital than in a traditional data center?

   • AInteroperability
   • BVirtualization
   • CMultitenancy
   • DPortability

   Show answer

   Answer: C

   Explanation

   With multiple tenants within the same hosting environment, any failure to properly classify data may lead to potential exposure to other customers and applications within the same environment.

   Next question

10. Question 40 · 493 in bank

    What concept does the "T" represent in the STRIDE threat model?

    • ATLS
    • BTesting
    • CTampering with data
    • DTransport

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSP practice, question 31. 493 questions available.