Question 411 · 493 in bank
For performance purposes, OS monitoring should include all of the following except:
Show answer
Answer: D
Explanation
Print spooling is not a metric for system performance; all the rest are.
ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
For performance purposes, OS monitoring should include all of the following except:
Answer: D
Print spooling is not a metric for system performance; all the rest are.
Identity and access management (IAM) is a security discipline that ensures which of the following?
Answer: B
Options A and C are also correct, but included in B, making B the best choice. D is incorrect, because we don't want unauthorized users gaining access.
Maintenance mode requires all of these actions except:
Answer: A
While the other answers are all steps in moving from normal operations to maintenance mode, we do not necessarily initiate any enhanced security controls.
What is one of the reasons a baseline might be changed?
Answer: A
If the CMB is receiving numerous change requests to the point where the amount of requests would drop by modifying the baseline, then that is a good reason to change the baseline. None of the other reasons should involve the baseline at all.
In a federated identity arrangement using a trusted third-party model, who is the identity provider and who is the relying party?
Answer: D
In a trusted third-party model of federation, each member organization outsources the review and approval task to a third party they all trust. This makes the third party the identifier (it issues and manages identities for all users in all organizations in the federation), and the various member organizations are the relying parties (the resource providers that share resources based on approval from the third party).
Database activity monitoring (DAM) can be:
Answer: A
We don't use DAM in place of encryption or masking; DAM augments these options without replacing them. We don't usually think of the database interaction as client-server, so A is the best answer.
The BC/DR kit should include all of the following except:
Answer: C
According to the book (chapter 8) I don't see any hard drive mentioned although it is what I personal would have done. I have to choose C because of ISC2...
Source: Adapted from community discussion — MarshalLaw
The baseline should cover which of the following?
Answer: C
The more systems that be included in the baseline, the more cost-effective and scalable the baseline is. The baseline does not deal with breaches or version control; those are the provinces of the security office and CMB, respectively. Regulatory compliance might (and usually will) go beyond the baseline and involve systems, processes, and personnel that are not subject to the baseline.
Which jurisdiction lacks specific and comprehensive privacy laws at a national or top level of legal authority?
Answer: D
The United States lacks a single comprehensive law at the federal level addressing data security and privacy, but there are multiple federal laws that deal with different industries.
A data custodian is responsible for which of the following?
Answer: C
A data custodian is responsible for the safe custody, transport, and storage of data, and the implementation of business roles.
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 411. 493 questions available.
Version 1.0.0. How we source questions