CCSP practice questions 51–60

1. Question 51 · 493 in bank

   Which of the cloud cross-cutting aspects relates to the ability for a cloud customer to easily remove their applications and data from a cloud environment?

   • AReversibility
   • BAvailability
   • CPortability
   • DInteroperability

   Show answer

   Answer: A

   Explanation

   Reversibility is the ability for a cloud customer to easily remove their applications or data from a cloud environment, as well as to ensure that all traces of their applications or data have been securely removed per a predefined agreement with the cloud provider.

   Source: Adapted from community discussion — zaqwsx

   Next question

2. Question 52 · 493 in bank

   Which of the following is NOT a function performed by the record protocol of TLS?

   • AEncryption
   • BAcceleration
   • CAuthentication
   • DCompression

   Show answer

   Answer: B

   Explanation

   ACCELERATION IS CORRECT. TLS Record protocol provides the actual secure communication method for transmitting data; encryption + authentication & in some cases also compression. Acceleration is not a component of TLS, it might be provided by another external component

   Source: Adapted from community discussion — kepalon

   Next question

3. Question 53 · 493 in bank

   What concept does the "R" represent with the DREAD model?

   • AReproducibility
   • BRepudiation
   • CRisk
   • DResidual

   Show answer

   Answer: A

   Explanation

   Reproducibility is the measure of how easy it is to reproduce and successful use an exploit. Scoring within the DREAD model ranges from 0, signifying a nearly impossibly exploit, up to 10, which signifies something that anyone from a simple function call could exploit, such as a URL.

   Source: Adapted from community discussion — Zeezee2

   Next question

4. Question 54 · 493 in bank

   The SOC Type 2 reports are divided into five principles. Which of the five principles must also be included when auditing any of the other four principles?

   • AConfidentiality
   • BPrivacy
   • CSecurity
   • DAvailability

   Show answer

   Answer: C

   Next question

5. Question 55 · 493 in bank

   How many additional DNS queries are needed when DNSSEC integrity checks are added?

   • AThree
   • BZero
   • COne
   • DTwo

   Show answer

   Answer: B

   Explanation

   DNSSEC does not require any additional DNS queries to be performed. The DNSSEC integrity checks and validations are all performed as part of the single DNS lookup resolution.

   Source: Adapted from community discussion — DA95

   Next question

6. Question 56 · 493 in bank

   Which networking concept in a cloud environment allows for network segregation and isolation of IP spaces?

   • APLAN
   • BWAN
   • CLAN
   • DVLAN

   Show answer

   Answer: D

   Next question

7. Question 57 · 493 in bank

   Which of the following service categories entails the least amount of support needed on the part of the cloud customer?

   • ASaaS
   • BIaaS
   • CDaaS
   • DPaaS

   Show answer

   Answer: A

   Explanation

   With SaaS providing a fully functioning application that is managed and maintained by the cloud provider, cloud customers incur the least amount of support responsibilities themselves of any service category.

   Next question

8. Question 58 · 493 in bank

   Which of the following would NOT be a reason to activate a BCDR strategy?

   • AStaffing loss
   • BTerrorism attack
   • CUtility disruptions
   • DNatural disaster

   Show answer

   Answer: A

   Next question

9. Question 59 · 493 in bank

   Which of the cloud cross-cutting aspects relates to the oversight of processes and systems, as well as to ensuring their compliance with specific policies and regulations?

   • AGovernance
   • BRegulatory requirements
   • CService-level agreements
   • DAuditability

   Show answer

   Answer: A

   Explanation

   Yes, it is. It is at the top of the list. Check ISO 17789. I know the books don't list it. Cross-cutting aspects include: • auditability (clause 8.5.2); • availability (clause 8.5.3); • governance (clause 8.5.4); • interoperability (clause 8.5.5); • maintenance and versioning (clause 8.5.6); • performance (clause 8.5.7); • portability (clause 8.5.8); • protection of personally identifiable information (clause 8.5.9); • regulatory; • resiliency (clause 8.5.10); • reversibility (clause 8.5.11); • security (clause 8.5.12); • service levels and service level agreement (clause 8.5.13).

   Source: Adapted from community discussion — Ahbey_911

   Next question

10. Question 60 · 493 in bank

    Which of the cloud cross-cutting aspects relates to the ability to reuse or move components of an application or service?

    • AAvailability
    • BInteroperability
    • CReversibility
    • DPortability

    Show answer

    Answer: D

    Explanation

    B does not seem to be the right answer. Portability seems like a better answer. Interoperability is the ability of two or more systems or applications to exchange information and to mutually use the information that has been exchanged. Cloud interoperability is the ability of a customer’s system to interact with a cloud service or the ability for one cloud service to interact with other cloud services by exchanging information according to a prescribed method to obtain predictable results. --------- Portability, on the other hand, is moving the data and/or applications from one system to another and having it remain useable or executable. Cloud data portability is the ability to easily move data from one cloud service to another without needing to re-enter the data. Cloud application portability is the ability to migrate an application from one cloud service to another or between a customer’s environment and a cloud service. ---------------------------------------

    Source: Adapted from community discussion — NYF

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSP practice, question 51. 493 questions available.