Exam 2: Certified Cloud Security Professional (CCSP)

Which of the following roles involves testing, monitoring, and securing cloud services for an organization?

From the perspective of compliance, what is the most important consideration when it comes to data center location?

Which of the following is considered an internal redundancy for a data center?

Which of the cloud cross-cutting aspects relates to the ability for a cloud customer to easily remove their applications and data from a cloud environment?

Which of the following actions will NOT make data part of the create phase of the cloud data lifecycle?

Which protocol does the REST API depend on?

Which attribute of data poses the biggest challenge for data discovery?

In the cloud motif, the data processor is usually:

From a legal perspective, what is the most important first step after an eDiscovery order has been received by the cloud provider?

DNSSEC was designed to add a layer of security to the DNS protocol. Which type of attack was the DNSSEC extension designed to mitigate?

Which of the following is the least challenging with regard to eDiscovery in the cloud?

Which of the following is NOT a focus or consideration of an internal audit?

What is the Cloud Security Alliance Cloud Controls Matrix (CCM)?

When data discovery is undertaken, three main approaches or strategies are commonly used to determine what the type of data, its format, and composition are for the purposes of classification. Which of the following is NOT one of the three main approaches to data discovery?

Which of the following is considered a physical control?

What type of segregation and separation of resources is needed within a cloud environment for multitenancy purposes versus a traditional data center model?

Which type of cloud model typically presents the most challenges to a cloud customer during the "destroy" phase of the cloud data lifecycle?

What is the cloud service model in which the customer is responsible for administration of the OS?

Which of the following is NOT a commonly used communications method within cloud environments to secure data in transit?

Database activity monitoring (DAM) can be: