Exam 2: Certified Cloud Security Professional (CCSP)

In which cloud service model is the customer required to maintain the OS?

During which phase of the cloud data lifecycle is it possible for the classification of data to change?

Which of the following threat types involves an application developer leaving references to internal information and configurations in code that is exposed to the client?

The WS-Security standards are built around all of the following standards except which one?

What category of PII data can carry potential fines or even criminal charges for its improper use or disclosure?

Without the extensive funds of a large corporation, a small-sized company could gain considerable and cost-effective services for which of the following concepts by moving to a cloud environment?

Which of the following is considered an external redundancy for a data center?

For performance purposes, OS monitoring should include all of the following except:

Which of the following threat types can occur when baselines are not appropriately applied or when unauthorized changes are made?

Which of the following is NOT a criterion for data within the scope of eDiscovery?

Which of the following roles involves the connection and integration of existing systems and services to a cloud environment?

Which of the following service categories entails the least amount of support needed on the part of the cloud customer?

When crafting plans and policies for data archiving, we should consider all of the following, except:

With a cloud service category where the cloud customer is responsible for deploying all services, systems, and components needed for their applications, which of the following storage types are MOST likely to be available to them?

Which United States program was designed to enable organizations to bridge the gap between privacy laws and requirements of the United States and the European Union?

Which of the cloud deployment models is used by popular services such as iCloud, Dropbox, and OneDrive?

SOC Type 1 reports are considered "restricted use," in that they are intended only for limited audiences and purposes. Which of the following is NOT a population that would be appropriate for a SOC Type 1 report?

Data center and operations design traditionally takes a tiered, topological approach. Which of the following standards is focused on that approach and is prevalently used throughout the industry?

Apart from using encryption at the file system level, what technology is the most widely used to protect data stored in an object storage system?

The European Union is often considered the world leader in regard to the privacy of personal data and has declared privacy to be a "human right." In what year did the EU first assert this principle?