Exam 2: Certified Cloud Security Professional (CCSP)

A variety of security systems can be integrated within a network--some that just monitor for threats and issue alerts, and others that take action based on signatures, behavior, and other types of rules to actively stop potential threats. Which of the following types of technologies is best described here?

Which of the following cloud aspects complicates eDiscovery?

Which of the following is NOT one of the components of multifactor authentication?

What is the experimental technology that might lead to the possibility of processing encrypted data without having to decrypt it first?

What is the term we use to describe the general ease and efficiency of moving data from one cloud provider either to another cloud provider or down from the cloud?

What are the U.S. Commerce Department controls on technology exports known as?

Which format is the most commonly used standard for exchanging information within a federated identity system?

What is a serious complication an organization faces from the perspective of compliance with international operations?

How many additional DNS queries are needed when DNSSEC integrity checks are added?

Although host-based and network-based IDSs perform similar functions and have similar capabilities, which of the following is an advantage of a network-based IDS over a host-based IDS, assuming all capabilities are equal?

Which aspect of cloud computing pertains to cloud customers only paying for the resources and services they actually use?

With the rapid emergence of cloud computing, very few regulations were in place that pertained to it specifically, and organizations often had to resort to using a collection of regulations that were not specific to cloud in order to drive audits and policies. Which standard from the ISO/IEC was designed specifically for cloud computing?

The BIA can be used to provide information about all the following, except:

Which of the following may unilaterally deem a cloud hosting model inappropriate for a system or application?

Cloud systems are increasingly used for BCDR solutions for organizations. What aspect of cloud computing makes their use for BCDR the most attractive?

Which phase of the cloud data lifecycle represents the first instance where security controls can be implemented?

Which of the following technologies is used to monitor network traffic and notify if any potential threats or attacks are noticed?

Which of the following actions will NOT make data part of the "create" phase of the cloud data lifecycle?

Which of the following is NOT part of a retention policy?

Different certifications and standards take different approaches to data center design and operations. Although many traditional approaches use a tiered methodology, which of the following utilizes a macro-level approach to data center design?