ISC2 Certified Cloud Security Professional493 questions across 50 pages are complete and free, with no account or card.
493 questions in this bank
Free access · progress saved on this device
What does the "SOC" acronym refer to with audit reports?
Answer: D
The term "SOC" in audit reports stands for System Organization Control. These reports, such as SOC 1, SOC 2, and SOC 3, evaluate a service organization's internal controls relevant to security, availability, processing integrity, confidentiality, or privacy.
Source: Adapted from community discussion — MaciekMT
What does the REST API use to protect data transmissions?
Answer: D
Representational State Transfer (REST) uses TLS for communication over secured channels. Although REST also supports SSL, at this point SSL has been phased out due to vulnerabilities and has been replaced by TLS.
What strategy involves replacing sensitive data with opaque values, usually with a means of mapping it back to the original value?
Answer: C
Masking protects data in use Tokenization typically use to protect data at rest Obfuscation scrambles sensitive data Anonymization permanently replaces sensitive data with a substitute value
Source: Adapted from community discussion — kns20
With software-defined networking, what aspect of networking is abstracted from the forwarding of traffic?
Answer: A
D is incorrect, A: Routing is correct, Routing is taken over the management plane!!! SDN contains a Management Plane & a Forwarding Plane, in the second one goes as well the Filtering The concept of Software Defined Networking (SDN) is about taking the routing control away from the individual network elements, and putting it in the hands of a centralized control layer - for example Nevion VideoIPath orchestration and SDN control system. https://techex.co.uk/ip-production/software-defined-network-sdn-routing#:~:text=Software%20Defined%20Network%20%28SDN%29%20routing%20The%20concept%20of,example%20Nevion%20VideoIPath%20orchestration%20and%20SDN%20control%20system.
Source: Adapted from community discussion — kepalon
Which of the following does NOT fall under the "IT" aspect of quality of service (QoS)?
Answer: B
KPIs fall under the "business" aspect of QoS, along with monitoring and measuring of events and business processes. Services, security, and applications are all core components and concepts of the "IT" aspect of QoS.
What does dynamic application security testing (DAST) NOT entail?
Answer: D
Dynamic application security testing (DAST) is considered "black box" testing and begins with no inside knowledge of the application or its configurations. Everything about the application must be discovered during the testing.
Where is an XML firewall most commonly deployed in the environment?
Answer: D
XML Firewall is an appliance so A and C are eliminated. XML is an application of interest. D places the appliance in the most applicable location in the topology.
Source: Adapted from community discussion — Lenell
What type of masking strategy involves replacing data on a system while it passes between the data and application layers?
Answer: A
With dynamic masking, production environments are protected with the masking process being implemented between the application and data layers of the application. This allows for a masking translation to take place live in the system and during normal application processing of data.
What type of segregation and separation of resources is needed within a cloud environment for multitenancy purposes versus a traditional data center model?
Answer: D
Which of the following is a widely used tool for code development, branching, and collaboration?
Answer: A
GitHub is an open source tool that developers leverage for code collaboration, branching, and versioning.
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CCSP practice, question 81. 493 questions available.
Version 1.0.0. How we source questions