CCSP practice questions 401–410

1. Question 401 · 493 in bank

   A UPS should have enough power to last how long?

   • AOne day
   • B12 hours
   • CLong enough for graceful shutdown
   • D10 minutes

   Show answer

   Answer: C

   Explanation

   The first request for a fix was over a year ago, how is it these are updated on a regular basis but wrong answers are permitted to endure? This does not help my confidence level for this site and future purposes.

   Source: Adapted from community discussion — reckert001

   Next question

2. Question 402 · 493 in bank

   Which of the following best describes the purpose and scope of ISO/IEC 27034-1?

   • ADescribes international privacy standards for cloud computing
   • BServes as a newer replacement for NIST 800-52 r4
   • CProvides on overview of network and infrastructure security designed to secure cloud applications.
   • DProvides an overview of application security that introduces definitive concepts, principles, and processes involved in application security.

   Show answer

   Answer: D

   Next question

3. Question 403 · 493 in bank

   Which of the following best describes SAML?

   • AA standard used for directory synchronization
   • BA standard for developing secure application management logistics
   • CA standard for exchanging usernames and passwords across devices.
   • DA standards for exchanging authentication and authorization data between security domains.

   Show answer

   Answer: D

   Explanation

   Security Assertion Markup Language is an open standard for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider.

   Source: Adapted from community discussion — serget12

   Next question

4. Question 404 · 493 in bank

   Web application firewalls (WAFs) are designed primarily to protect applications from common attacks like:

   • ARansomware
   • BSyn floods
   • CXSS and SQL injection
   • DPassword cracking

   Show answer

   Answer: C

   Next question

5. Question 405 · 493 in bank

   APIs are defined as which of the following?

   • AA set of protocols, and tools for building software applications to access a web-based software application or tool
   • BA set of routines, standards, protocols, and tools for building software applications to access a web-based software application or tool
   • CA set of standards for building software applications to access a web-based software application or tool
   • DA set of routines and tools for building software applications to access web-based software applications

   Show answer

   Answer: B

   Explanation

   All the answers are true, but B is the most complete.

   Source: Adapted from community discussion — pooppants

   Next question

6. Question 406 · 493 in bank

   Which of the following best describes data masking?

   • AA method for creating similar but inauthentic datasets used for software testing and user training.
   • BA method used to protect prying eyes from data such as social security numbers and credit card data.
   • CA method where the last few numbers in a dataset are not obscured. These are often used for authentication.
   • DData masking involves stripping out all digits in a string of numbers so as to obscure the original number.

   Show answer

   Answer: B

   Explanation

   I disagree - data masking has a much wider use than just training and testing. B is probably closer to the truth, but all the answers are too limited and simplistic.

   Source: Adapted from community discussion — AlanJP

   Next question

7. Question 407 · 493 in bank

   Which of the following best describes a sandbox?

   • AAn isolated space where untested code and experimentation can safely occur separate from the production environment.
   • BA space where you can safely execute malicious code to see what it does.
   • CAn isolated space where transactions are protected from malicious software
   • DAn isolated space where untested code and experimentation can safely occur within the production environment.

   Show answer

   Answer: A

   Explanation

   Options C and B are also correct, but A is more general and incorporates them both. D is incorrect, because sandboxing does not take place in the production environment.

   Next question

8. Question 408 · 493 in bank

   Which of the following is NOT a regulatory system from the United States federal government?

   • APCI DSS
   • BFISMA
   • CSOX
   • DHIPAA

   Show answer

   Answer: A

   Explanation

   The payment card industry data security standard (PCI DSS) pertains to organizations that handle credit card transactions and is an industry regulatory standard, not a governmental one.

   Next question

9. Question 409 · 493 in bank

   A localized incident or disaster can be addressed in a cost-effective manner by using which of the following?

   • AUPS
   • BGenerators
   • CJoint operating agreements
   • DStrict adherence to applicable regulations

   Show answer

   Answer: C

   Next question

10. Question 410 · 493 in bank

    In addition to battery backup, a UPS can offer which capability?

    • ABreach alert
    • BConfidentiality
    • CCommunication redundancy
    • DLine conditioning

    Show answer

    Answer: D

    Explanation

    A UPS can provide line conditioning, adjusting power so that it is optimized for the devices it serves and smoothing any power fluctuations; it does not offer any of the other listed functions.

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSP practice, question 401. 493 questions available.