Question 451 · 493 in bank
Which of the following does NOT relate to the hiding of sensitive data from data sets?
Show answer
Answer: B
Explanation
Federation pertains to authenticating systems between different organizations.
ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
Which of the following does NOT relate to the hiding of sensitive data from data sets?
Answer: B
Federation pertains to authenticating systems between different organizations.
Which of the following are the storage types associated with IaaS?
Answer: A
Which technology can be useful during the "share" phase of the cloud data lifecycle to continue to protect data as it leaves the original system and security controls?
Answer: C
Data loss prevention (DLP) can be applied to data that is leaving the security enclave to continue to enforce access restrictions and policies on other clients and systems.
Which of the following storage types is most closely associated with a traditional file system and tree structure?
Answer: A
You actually prove that it is not Object Storage in your blurb: "Many CSPs have interfaces that present object storage in a similar fashion to standard file tree structures (like a Windows directory), but the files are actually just virtual objects in an independent storage structure that rely on key values to reference and retrieve them" While a CSP may present it like tradition storage, it is not actually stored in a tree like structure. So the correct answer is Volume.
Source: Adapted from community discussion — Xindydo
Which of the following represents a prioritization of applications or cloud customers for the allocation of additional requested resources when there is a limitation on available resources?
Answer: C
C is correct, because all other options do not prioritize one customer over another. With "reservations", the customer has a predefined minimum of resources that will be given to him when he demands them.
Source: Adapted from community discussion — Sven007
Which type of audit report does many cloud providers use to instill confidence in their policies, practices, and procedures to current and potential customers?
Answer: B
SAS70 is already defunct and SOX is not applicable for cloud providers. The question has "instill confidence" doesn't mean the report will shared. SOC1 and SOC2 reports both provide this confidence. SOC2 is the better choice among the two. Not among the choices, I would prefer SOC3 report as "potential" costumers are listed in the question.
Source: Adapted from community discussion — certifiedgeek
Which of the following statements accurately describes VLANs?
Answer: A
Plenty of people use layer 2 vlans across datacentres in a stretched storage and/or hypervisor cluster active/active mode. it's a high availability strategy (as opposed to DR)
Source: Adapted from community discussion — GregP
What must be secured on physical hardware to prevent unauthorized access to systems?
Answer: A
BIOS is the firmware that governs the physical initiation and boot up of a piece of hardware. If it is compromised, an attacker could have access to hosted systems and make configurations changes to expose or disable some security elements on the system.
Source: Adapted from community discussion — Zeezee2
What type of PII is regulated based on the type of application or per the conditions of the specific hosting agreement?
Answer: B
Contractual PII has specific requirements for the handling of sensitive and personal information, as defined at a contractual level. These specific requirements will typically document the required handling procedures and policies to deal with PII. They may be in specific security controls and configurations, required policies or procedures, or limitations on who may gain authorized access to data and systems.
Which of the following security technologies is commonly used to give administrators access into trust zones within an environment?
Answer: A
Virtual private networks (VPNs) are commonly used to allow access into trust zones. Via a VPN, access can be controlled and logged and only allowed through secure channels by authorized users. It also adds an additional layer of encryption and protection to communications.
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 451. 493 questions available.
Version 1.0.0. How we source questions