Exam 2: Certified Cloud Security Professional (CCSP)

Modern web service systems are designed for high availability and resiliency. Which concept pertains to the ability to detect problems within a system, environment, or application and programmatically invoke redundant systems or processes for mitigation?

Which audit type has been largely replaced by newer approaches since 2011?

What is the best source for information about securing a physical asset's BIOS?

What is the intellectual property protection for a confidential recipe for muffins?

Because of multitenancy, specific risks in the public cloud that don't exist in the other cloud service models include all the following except:

Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?

Upon completing a risk analysis, a company has four different approaches to addressing risk. Which approach it takes will be based on costs, available options, and adherence to any regulatory requirements from independent audits. Which of the following groupings correctly represents the four possible approaches?

When dealing with PII, which category pertains to those requirements that can carry legal sanctions or penalties for failure to adequately safeguard the data and address compliance requirements?

The baseline should cover which of the following?

A main objective for an organization when utilizing cloud services is to avoid vendor lock-in so as to ensure flexibility and maintain independence. Which core concept of cloud computing is most related to vendor lock-in?

Which ITIL component is focused on anticipating predictable problems and ensuring that configurations and operations are in place to prevent these problems from ever occurring?

Which concept BEST describes the capability for a cloud environment to automatically scale a system or application, based on its current resource demands?

Three central concepts define what type of data and information an organization is responsible for pertaining to eDiscovery. Which of the following are the three components that comprise required disclosure?

Which of the following roles is responsible for overseeing customer relationships and the processing of financial transactions?

Which of the following pertains to a macro level approach to data center design rather than the traditional tiered approach to data centers?

Your IT steering committee has, at a high level, approved your project to begin using cloud services. However, the committee is concerned with getting locked into a single cloud provider and has flagged the ability to easily move between cloud providers as a top priority. It also wants to save costs by reusing components. Which cross-cutting aspect of cloud computing would be your primary focus as your project plan continues to develop and you begin to evaluate cloud providers?

To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:

What type of masking strategy involves making a separate and distinct copy of data with masking in place?

Which of the following systems is used to employ a variety of different techniques to discover and alert on threats and potential threats to systems and networks?

Which type of testing uses the same strategies and toolsets that hackers would use?