Question 391 · 493 in bank
All of the following are techniques to enhance the portability of cloud data, in order to minimize the potential of vendor lock-in except:
Show answer
Answer: B
ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
All of the following are techniques to enhance the portability of cloud data, in order to minimize the potential of vendor lock-in except:
Answer: B
Hardening the operating system refers to all of the following except:
Answer: C
Removing antimalware agents. Hardening the operating system means making it more secure. Limiting administrator access, closing unused ports, and removing unnecessary services and libraries all have the potential to make an OS more secure. But removing antimalware agents would actually make the system less secure. If anything, antimalware agents should be added, not removed.
Which kind of SSAE audit report is a cloud customer most likely to receive from a cloud provider?
Answer: C
The SOC 3 is the least detailed, so the provider is not concerned about revealing it. The SOC 1 Types 1 and 2 are about financial reporting, and not relevant. The SOC 2 Type 2 is much more detailed and will most likely be kept closely held by the provider.
The cloud customer's trust in the cloud provider can be enhanced by all of the following except:
Answer: D
As a result of scandals involving publicly traded corporations such as Enron, WorldCom, and Adelphi, Congress passed legislation known as:
Answer: A
Sarbanes-Oxley was a direct response to corporate scandals. FERPA is related to education. GLBA is about the financial industry. HIPAA is about health care.
In addition to whatever audit results the provider shares with the customer, what other mechanism does the customer have to ensure trust in the provider's performance and duties?
Answer: B
The contract between the provider and customer enhances the customer's trust by holding the provider financially liable for negligence or inadequate service (although the customer remains legally liable for all inadvertent disclosures). Statutes, however, largely leave customers liable. The security control matrix is a tool for ensuring compliance with regulations. HIPAA is a statute.
How is an object stored within an object storage system?
Answer: A
An object is typically stored in an object storage system as a collection of data associated with a unique identifier, known as the "key". The key is used to retrieve the object from the system. The object itself can be stored in a variety of ways, such as in a flat file system, a database, or a tree structure. The specific method used to store the object will depend on the particular object storage system being used.
Source: Adapted from community discussion — DA95
The application normative framework is best described as which of the following?
Answer: D
Remember, there is a one-to-many ratio of ONF to ANF; each organization has one ONF and many ANFs (one for each application in the organization). Therefore, the ANF is a subset of the ONF.
Deviations from the baseline should be investigated and __________________.
Answer: B
All deviations from the baseline should be documented, including details of the investigation and outcome. We do not enforce or encourage deviations. Presumably, we would already be aware of the deviation, so ג€revealingג€ is not a reasonable answer.
Which of the following best describes the Organizational Normative Framework (ONF)?
Answer: D
Option B is incorrect, because it refers to a specific applications security elements, meaning it is about an ANF, not the ONF. C is true, but not as complete as D, making D the better choice. C suggests that the framework contains only ג€someג€ of the components, which is why B (which describes ג€allג€ components) is better
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 391. 493 questions available.
Version 1.0.0. How we source questions