Question 1

Which of the following would be a reason to undertake a BCDR test?

Accepted Answer

A)  Functional change of the application 
B)  Change in staff 
C)  User interface overhaul of the application 
D)  Change in regulations 
A)  Functional change of the application 
B)  Change in staff 
C)  User interface overhaul of the application 
D)  Change in regulations

Question 2

Which ITIL component focuses on ensuring that system resources, processes, and personnel are properly allocated to meet SLA requirements?

Accepted Answer

A)  Continuity management 
B)  Availability management 
C)  Configuration management 
D)  Problem management 
A)  Continuity management 
B)  Availability management 
C)  Configuration management 
D)  Problem management

Question 3

Every security program and process should have which of the following?

Accepted Answer

A)  Severe penalties 
B)  Multifactor authentication 
C)  Foundational policy 
D)  Homomorphic encryption 
A)  Severe penalties 
B)  Multifactor authentication 
C)  Foundational policy 
D)  Homomorphic encryption

Question 4

What concept does the D represent within the STRIDE threat model?

Accepted Answer

A)  Denial of service 
B)  Distributed 
C)  Data breach 
D)  Data loss 
A)  Denial of service 
B)  Distributed 
C)  Data breach 
D)  Data loss

Question 5

Tokenization requires two distinct _________________ .

Accepted Answer

A)  Authentication factors 
B)  Personnel 
C)  Databases 
D)  Encryption 
A)  Authentication factors 
B)  Personnel 
C)  Databases 
D)  Encryption

Question 6

The SOC Type 2 reports are divided into five principles. Which of the five principles must also be included when auditing any of the other four principles?

Accepted Answer

A)  Confidentiality 
B)  Privacy 
C)  Security 
D)  Availability 
A)  Confidentiality 
B)  Privacy 
C)  Security 
D)  Availability

Question 7

What does the REST API support that SOAP does NOT support?

Accepted Answer

A)  Caching 
B)  Encryption 
C)  Acceleration 
D)  Redundancy 
A)  Caching 
B)  Encryption 
C)  Acceleration 
D)  Redundancy

Question 8

Which of the following best describes data masking?

Accepted Answer

A)  A method for creating similar but inauthentic datasets used for software testing and user training. 
B)  A method used to protect prying eyes from data such as social security numbers and credit card data. 
C)  A method where the last few numbers in a dataset are not obscured. These are often used for authentication. 
D)  Data masking involves stripping out all digits in a string of numbers so as to obscure the original number. 
A)  A method for creating similar but inauthentic datasets used for software testing and user training. 
B)  A method used to protect prying eyes from data such as social security numbers and credit card data. 
C)  A method where the last few numbers in a dataset are not obscured. These are often used for authentication. 
D)  Data masking involves stripping out all digits in a string of numbers so as to obscure the original number.

Question 9

DLP can be combined with what other security technology to enhance data controls?

Accepted Answer

A)  DRM 
B)  Hypervisor 
C)  SIEM 
D)  Kerberos 
A)  DRM 
B)  Hypervisor 
C)  SIEM 
D)  Kerberos

Question 10

What is the primary reason that makes resolving jurisdictional conflicts complicated?

Accepted Answer

A)  Different technology standards 
B)  Costs 
C)  Language barriers 
D)  Lack of international authority 
A)  Different technology standards 
B)  Costs 
C)  Language barriers 
D)  Lack of international authority

Question 11

What is the correct order of the phases of the data life cycle?

Accepted Answer

A)  Create, Use, Store, Share, Archive, Destroy 
B)  Create, Archive, Store, Share, Use, Destroy 
C)  Create, Store, Use, Archive, Share, Destroy 
D)  Create, Store, Use, Share, Archive, Destroy 
A)  Create, Use, Store, Share, Archive, Destroy 
B)  Create, Archive, Store, Share, Use, Destroy 
C)  Create, Store, Use, Archive, Share, Destroy 
D)  Create, Store, Use, Share, Archive, Destroy

Question 12

Which cloud storage type requires special consideration on the part of the cloud customer to ensure they do not program themselves into a vendor lock-in situation?

Accepted Answer

A)  Unstructured 
B)  Object 
C)  Volume 
D)  Structured 
A)  Unstructured 
B)  Object 
C)  Volume 
D)  Structured

Question 13

The BC/DR kit should include all of the following except:

Accepted Answer

A)  Annotated asset inventory 
B)  Flashlight 
C)  Hard drives 
D)  Documentation equipment 
A)  Annotated asset inventory 
B)  Flashlight 
C)  Hard drives 
D)  Documentation equipment

Question 14

Which of the following is NOT a key area for performance monitoring as far as an SLA is concerned?

Accepted Answer

A)  CPU 
B)  Users 
C)  Memory 
D)  Network 
A)  CPU 
B)  Users 
C)  Memory 
D)  Network

Question 15

Which of the following terms is NOT a commonly used category of risk acceptance?

Accepted Answer

A)  Moderate 
B)  Critical 
C)  Minimal 
D)  Accepted 
A)  Moderate 
B)  Critical 
C)  Minimal 
D)  Accepted

Question 16

Which of the following components are part of what a CCSP should review when looking at contracting with a cloud service provider?

Accepted Answer

A)  Redundant uplink grafts 
B)  Background checks for the provider's personnel 
C)  The physical layout of the datacenter 
D)  Use of subcontractors 
A)  Redundant uplink grafts 
B)  Background checks for the provider's personnel 
C)  The physical layout of the datacenter 
D)  Use of subcontractors

Question 17

Which of the following aspects of cloud computing would make it more likely that a cloud provider would be unwilling to satisfy specific certification requirements?

Accepted Answer

A)  Regulation 
B)  Multitenancy 
C)  Virtualization 
D)  Resource pooling 
A)  Regulation 
B)  Multitenancy 
C)  Virtualization 
D)  Resource pooling

Question 18

Although much of the attention given to data security is focused on keeping data private and only accessible by authorized individuals, of equal importance is the trustworthiness of the data. Which concept encapsulates this?

Accepted Answer

A)  Validity 
B)  Integrity 
C)  Accessibility 
D)  Confidentiality 
A)  Validity 
B)  Integrity 
C)  Accessibility 
D)  Confidentiality

Question 19

The GAPP framework was developed through a joint effort between the major Canadian and American professional accounting associations in order to assist their members with managing and preventing risks to the privacy of their data and customers. Which of the following is the meaning of GAPP?

Accepted Answer

A)  General accounting personal privacy 
B)  Generally accepted privacy practices 
C)  Generally accepted privacy principles 
D)  General accounting privacy policies 
A)  General accounting personal privacy 
B)  Generally accepted privacy practices 
C)  Generally accepted privacy principles 
D)  General accounting privacy policies

Question 20

Countermeasures for protecting cloud operations against internal threats include all of the following except:

Accepted Answer

A)  Mandatory vacation 
B)  Least privilege 
C)  Separation of duties 
D)  Conflict of interest 
A)  Mandatory vacation 
B)  Least privilege 
C)  Separation of duties 
D)  Conflict of interest

Which of the following would be a reason to undertake a BCDR test?

Which ITIL component focuses on ensuring that system resources, processes, and personnel are properly allocated to meet SLA requirements?

Every security program and process should have which of the following?

What concept does the D represent within the STRIDE threat model?

Tokenization requires two distinct _________________ .

The SOC Type 2 reports are divided into five principles. Which of the five principles must also be included when auditing any of the other four principles?

What does the REST API support that SOAP does NOT support?

Which of the following best describes data masking?

DLP can be combined with what other security technology to enhance data controls?

What is the primary reason that makes resolving jurisdictional conflicts complicated?

What is the correct order of the phases of the data life cycle?

Which cloud storage type requires special consideration on the part of the cloud customer to ensure they do not program themselves into a vendor lock-in situation?

The BC/DR kit should include all of the following except:

Which of the following is NOT a key area for performance monitoring as far as an SLA is concerned?

Which of the following terms is NOT a commonly used category of risk acceptance?

Which of the following components are part of what a CCSP should review when looking at contracting with a cloud service provider?

Which of the following aspects of cloud computing would make it more likely that a cloud provider would be unwilling to satisfy specific certification requirements?

Although much of the attention given to data security is focused on keeping data private and only accessible by authorized individuals, of equal importance is the trustworthiness of the data. Which concept encapsulates this?

The GAPP framework was developed through a joint effort between the major Canadian and American professional accounting associations in order to assist their members with managing and preventing risks to the privacy of their data and customers. Which of the following is the meaning of GAPP?

Countermeasures for protecting cloud operations against internal threats include all of the following except:

Certified Authorization Professional

Certified Information Systems Security Professional

Filters

Exam 2: Certified Cloud Security Professional (CCSP)

Which of the following would be a reason to undertake a BCDR test?

Which ITIL component focuses on ensuring that system resources, processes, and personnel are properly allocated to meet SLA requirements?

Every security program and process should have which of the following?

What concept does the D represent within the STRIDE threat model?

Tokenization requires two distinct _________________ .

The SOC Type 2 reports are divided into five principles. Which of the five principles must also be included when auditing any of the other four principles?

What does the REST API support that SOAP does NOT support?

Which of the following best describes data masking?

DLP can be combined with what other security technology to enhance data controls?

What is the primary reason that makes resolving jurisdictional conflicts complicated?

What is the correct order of the phases of the data life cycle?

Which cloud storage type requires special consideration on the part of the cloud customer to ensure they do not program themselves into a vendor lock-in situation?

The BC/DR kit should include all of the following except:

Which of the following is NOT a key area for performance monitoring as far as an SLA is concerned?

Which of the following terms is NOT a commonly used category of risk acceptance?

Which of the following components are part of what a CCSP should review when looking at contracting with a cloud service provider?

Which of the following aspects of cloud computing would make it more likely that a cloud provider would be unwilling to satisfy specific certification requirements?

Although much of the attention given to data security is focused on keeping data private and only accessible by authorized individuals, of equal importance is the trustworthiness of the data. Which concept encapsulates this?

The GAPP framework was developed through a joint effort between the major Canadian and American professional accounting associations in order to assist their members with managing and preventing risks to the privacy of their data and customers. Which of the following is the meaning of GAPP?

Countermeasures for protecting cloud operations against internal threats include all of the following except:

Certified Authorization Professional

Certified Information Systems Security Professional

Filters