Question 421 · 493 in bank
Which of the following is the least challenging with regard to eDiscovery in the cloud?
Show answer
Answer: A
ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
Which of the following is the least challenging with regard to eDiscovery in the cloud?
Answer: A
What is the Cloud Security Alliance Cloud Controls Matrix (CCM)?
Answer: C
Which of the following is a valid risk management metric?
Answer: B
KRI stands for key risk indicator. KRIs are the red flags if you will in the world of risk management. When these change, they indicate something is amiss and should be looked at quickly to determine if the change is minor or indicative of something important.
Which of the following is the best example of a key component of regulated PII?
Answer: D
coz you might be a payment gateway hence you have a contract with master or visa to be PCI complaint hence contractual PII.
Source: Adapted from community discussion — ssurmeds
Which of the following components are part of what a CCSP should review when looking at contracting with a cloud service provider?
Answer: D
The use of subcontractors can add risk to the supply chain and should be considered; trusting the provider's management of their vendors and suppliers (including subcontractors) is important to trusting the provider. Conversely, the customer is not likely to be allowed to review the physical design of the datacenter (or, indeed, even know the exact location of the datacenter) or the personnel security specifics for the provider's staff. ג€Redundant uplink graftsג€ is a nonsense term used as a distractor.
Which of the following is not a way to manage risk?
Answer: D
Enveloping is a nonsense term, unrelated to risk management. The rest are not.
Which of the following terms is not associated with cloud forensics?
Answer: D
Plausibility, here, is a distractor and not specifically relevant to cloud forensics.
Which of the following roles involves testing, monitoring, and securing cloud services for an organization?
Answer: D
Which of the following roles involves testing, monitoring, and securing cloud services for an organization? A. Cloud service integrator - doesn't sound right B. Cloud service business manager - nope, they don't test or secure C. Cloud service user - user consume the service, not monitor or secure D. Cloud service administrator - sounds right
Source: Adapted from community discussion — dev46
Which United States law is focused on PII as it relates to the financial industry?
Answer: D
The GLBA, as it is commonly called based on the lead sponsors and authors of the act, is officially known as "The Financial Modernization Act of 1999." It is specifically focused on PII as it relates to financial institutions. There are three specific components of it, covering various areas and use, on top of a general requirement that all financial institutions must provide all users and customers with a written copy of their privacy policies and practices, including with whom and for what reasons their information may be shared with other entities.
Which is the lowest level of the CSA STAR program?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 421. 493 questions available.
Version 1.0.0. How we source questions