Exam 2: Certified Cloud Security Professional (CCSP)

Which of the following is the primary purpose of an SOC 3 report?

Which of the following concepts refers to a cloud customer paying only for the resources and offerings they use within a cloud environment, and only for the duration that they are consuming them?

BCDR strategies typically do not involve the entire operations of an organization, but only those deemed critical to their business. Which concept pertains to the amount of data and services needed to reach the predetermined level of operations?

Legal controls refer to which of the following?

Humidity levels for a data center are a prime concern for maintaining electrical and computing resources properly as well as ensuring that conditions are optimal for top performance. Which of the following is the optimal humidity level, as established by ASHRAE?

There is a large gap between the privacy laws of the United States and those of the European Union. Bridging this gap is necessary for American companies to do business with European companies and in European markets in many situations, as the American companies are required to comply with the stricter requirements. Which US program was designed to help companies overcome these differences?

When an API is being leveraged, it will encapsulate its data for transmission back to the requesting party or service. What is the data encapsulation used with the SOAP protocol referred to as?

What masking strategy involves the replacing of sensitive data at the time it is accessed and used as it flows between the data and application layers of a service?

What type of masking would you employ to produce a separate data set for testing purposes based on production data without any sensitive information?

A localized incident or disaster can be addressed in a cost-effective manner by using which of the following?

Which entity requires all collection and storing of data on their citizens to be done on hardware that resides within their borders?

What are third-party providers of IAM functions for the cloud environment?

Which of the following service capabilities gives the cloud customer an established and maintained framework to deploy code and applications?

When beginning an audit, both the system owner and the auditors must agree on various aspects of the final audit report. Which of the following would NOT be something that is predefined as part of the audit agreement?

What is a serious complication an organization faces from the compliance perspective with international operations?

Which aspect of cloud computing makes data classification even more vital than in a traditional data center?

Which of the following are the storage types associated with IaaS?

The application normative framework is best described as which of the following?

Different types of audits are intended for different audiences, such as internal, external, regulatory, and so on. Which of the following audits are considered "restricted use" versus being for a more broad audience?

For optimal security, trust zones are used for network segmentation and isolation. They allow for the separation of various systems and tiers, each with its own security level. Which of the following is typically used to allow administrative personnel access to trust zones?