ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
Which of the following is a restriction that can be enforced by information rights management (IRM) that is not possible for traditional file system controls?
Answer: D
D- Print is correct. With file system controls you can limit the rights to only read, write or modify, once you can read you will be able to print. Therefore PRINT is the correct answer.
Source: Adapted from community discussion — kepalon
What strategy involves hiding data in a data set to prevent someone from identifying specific individuals based on other data fields present?
Answer: A
With data anonymization, data is manipulated in such a way so as to prevent the identification of an individual through various data objects, and is often used in conjunction with other concepts such as masking.
What type of security threat is DNSSEC designed to prevent?
Answer: C
DNSSEC is designed to prevent the spoofing and redirection of DNS resolutions to rogue sites.
Which European Union directive pertains to personal data privacy and an individual's control over their personal data?
Answer: B
Directive 95/46/EC is titled "On the protection of individuals with regard to the processing of personal data and on the free movement of such data."
Source: Adapted from community discussion — ichnos
Which of the cloud cross-cutting aspects relates to the requirements placed on a system or application by law, policy, or requirements from standards?
Answer: A
Which data point that auditors always desire is very difficult to provide within a cloud environment?
Answer: B
Cloud environments are constantly changing and often span multiple physical locations. A cloud customer is also very unlikely to have knowledge and insight into the underlying systems architecture in a cloud environment. Both of these realities make it very difficult, if not impossible, for an organization to provide a comprehensive systems design document.
Which of the following standards primarily pertains to cabling designs and setups in a data center?
Answer: B
The standards put out by Building Industry Consulting Service International (BICSI) primarily cover complex cabling designs and setups for data centers, but also include specifications on power, energy efficiency, and hot/cold aisle setups.
Source: Adapted from community discussion — TimothyF
What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?
Answer: B
A bastion host is a server that is fully exposed to the public Internet, but is extremely hardened to prevent attacks and is usually dedicated for a specific application or usage; it is not something that will serve multiple purposes. This singular focus allows for much more stringent security hardening and monitoring.
Which security concept is focused on the trustworthiness of data?
Answer: A
Integrity is directly related to the trustworthiness of data - it refers to the accuracy of the data. It ensures the data isn't corrupted or tampered with during storage, retrieval, or processing.
Source: Adapted from community discussion — Kneebee
Which OSI layer does IPsec operate at?
Answer: A
A major difference between IPsec and other protocols such as TLS is that IPsec operates at the Internet network layer rather than the application layer, allowing for complete end-to-end encryption of all communications and traffic.
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 61. 493 questions available.
Version 1.0.0. How we source questions