Exam 2: Certified Cloud Security Professional (CCSP)

Many aspects and features of cloud computing can make eDiscovery compliance more difficult or costly. Which aspect of cloud computing would be the MOST complicating factor?

Which of the following statements best describes a Type 1 hypervisor?

Which aspect of data poses the biggest challenge to using automated tools for data discovery and programmatic data classification?

Which security concept is based on preventing unauthorized access to data while also ensuring that it is accessible to those authorized to use it?

Many aspects of cloud computing bring enormous benefits over a traditional data center, but also introduce new challenges unique to cloud computing. Which of the following aspects of cloud computing makes appropriate data classification of high importance?

Which of the following concepts is NOT one of the core components to an encryption system architecture?

Which of the following aspects of security is solely the responsibility of the cloud provider?

Which of the following is NOT one of the official risk rating categories?

Which aspect of security is DNSSEC designed to ensure?

As a result of scandals involving publicly traded corporations such as Enron, WorldCom, and Adelphi, Congress passed legislation known as:

Which of the following roles is responsible for creating cloud components and the testing and validation of services?

Which OSI layer does IPsec operate at?

Gathering business requirements can aid the organization in determining all of this information about organizational assets, except:

Where is a DLP solution generally installed when utilized for monitoring data in use?

Which of the following can be useful for protecting cloud customers from a denial-of-service (DoS) attack against another customer hosted in the same cloud?

Which of the following would be considered an example of insufficient due diligence leading to security or operational problems when moving to a cloud?

The cloud customer will have the most control of their data and systems, and the cloud provider will have the least amount of responsibility, in which cloud computing arrangement?

Which of the following threat types involves an application that does not validate authorization for portions of itself beyond when the user first enters it?

Which of the following jurisdictions lacks a comprehensive national policy on data privacy and the protection of personally identifiable information (PII)?

With a federated identity system, what does the identity provider send information to after a successful authentication?