Exam 2: Certified Cloud Security Professional (CCSP)

Which of the following roles involves overseeing billing, purchasing, and requesting audit reports for an organization within a cloud environment?

ISO/IEC has established international standards for many aspects of computing and any processes or procedures related to information technology. Which ISO/IEC standard has been established to provide a framework for handling eDiscovery processes?

Which of the following tasks within a SaaS environment would NOT be something the cloud customer would be responsible for?

Data labels could include all the following, except:

If you're using iSCSI in a cloud environment, what must come from an external protocol or application?

Which of the following does NOT relate to the hiding of sensitive data from data sets?

Which of the following standards primarily pertains to cabling designs and setups in a data center?

Each of the following are dependencies that must be considered when reviewing the BIA after cloud migration except:

What is the experimental technology that might lead to the possibility of processing encrypted data without having to decrypt it first?

What process is used within a cloud environment to maintain resource balancing and ensure that resources are available where and when needed?

Which kind of SSAE audit reviews controls dealing with the organization's controls for assuring the confidentiality, integrity, and availability of data?

Which aspect of cloud computing makes it very difficult to perform repeat audits over time to track changes and compliance?

Which of the following is the best example of a key component of regulated PII?

Which process serves to prove the identity and credentials of a user requesting access to an application or data?

What does dynamic application security testing (DAST) NOT entail?

Which of the cloud cross-cutting aspects relates to the requirements placed on the cloud provider by the cloud customer for minimum performance standards and requirements that must be met?

Which of the following is not an example of a highly regulated environment?

Being in a cloud environment, cloud customers lose a lot of insight and knowledge as to how their data is stored and their systems are deployed. Which concept from the ISO/IEC cloud standards relates to the necessity of the cloud provider to inform the cloud customer on these issues?

Which networking concept in a cloud environment allows for network segregation and isolation of IP spaces?

A crucial decision any company must make is in regard to where it hosts the data systems it depends on. A debate exists as to whether it's best to lease space in a data center or build your own data center--and now with cloud computing, whether to purchase resources within a cloud. What is the biggest advantage to leasing space in a data center versus procuring cloud services?