Exam 2: Certified Cloud Security Professional (CCSP)

Where is a DLP solution generally installed when utilized for monitoring data in transit?

Which one of the following threat types to applications and services involves the sending of requests that are invalid and manipulated through a user's client to execute commands on the application under the user's own credentials?

The president of your company has tasked you with implementing cloud services as the most efficient way of obtaining a robust disaster recovery configuration for your production services. Which of the cloud deployment models would you MOST likely be exploring?

For service provisioning and support, what is the ideal amount of interaction between a cloud customer and cloud provider?

Which cloud deployment model would be ideal for a group of universities looking to work together, where each university can gain benefits according to its specific needs?

What concept does the "I" represent with the STRIDE threat model?

There are many situations when testing a BCDR plan is appropriate or mandated. Which of the following would not be a necessary time to test a BCDR plan?

Although the REST API supports a wide variety of data formats for communications and exchange, which data formats are the most commonly used?

Which of the following service capabilities gives the cloud customer the least amount of control over configurations and deployments?

Which of the following threat types involves the sending of invalid and manipulated requests through a user's client to execute commands on the application under their own credentials?

Tokenization requires two distinct _________________ .

What is the only data format permitted with the SOAP API?

Why does a Type 1 hypervisor typically offer tighter security controls than a Type 2 hypervisor?

Deviations from the baseline should be investigated and __________________.

What is the biggest concern with hosting a key management system outside of the cloud environment?

Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?

Which of the cloud deployment models offers the most control and input to the cloud customer as to how the overall cloud environment is implemented and configured?

What concept does the "R" represent with the DREAD model?

Which of the following best describes the Organizational Normative Framework (ONF)?

Which of the cloud cross-cutting aspects relates to the oversight of processes and systems, as well as to ensuring their compliance with specific policies and regulations?