Exam 2: Certified Cloud Security Professional (CCSP)

Gap analysis is performed for what reason?

Which of the following is NOT considered a type of data loss?

Data centers have enormous power resources that are distributed and consumed throughout the entire facility. Which of the following standards pertains to the proper fire safety standards within that scope?

What type of solution is at the core of virtually all directory services?

Which of the following statements accurately describes VLANs?

APIs are defined as which of the following?

Many different common threats exist against web-exposed services and applications. One attack involves attempting to leverage input fields to execute queries in a nested fashion that is unintended by the developers. What type of attack is this?

Cryptographic keys should be secured ________________ .

Which of the following is NOT an application or utility to apply and enforce baselines on a system?

Which of the following is NOT one of the main intended goals of a DLP solution?

Different security testing methodologies offer different strategies and approaches to testing systems, requiring security personnel to determine the best type to use for their specific circumstances. What does dynamic application security testing (DAST) NOT entail that SAST does?

Which of the following is NOT a function performed by the record protocol of TLS?

What does the REST API use to protect data transmissions?

What type of masking strategy involves replacing data on a system while it passes between the data and application layers?

What is the biggest negative to leasing space in a data center versus building or maintain your own?

Which cloud deployment model is MOST likely to offer free or very cheap services to users?

You need to gain approval to begin moving your company's data and systems into a cloud environment. However, your CEO has mandated the ability to easily remove your IT assets from the cloud provider as a precondition. Which of the following cloud concepts would this pertain to?

To protect data on user devices in a BYOD environment, the organization should consider requiring all the following, except:

Within an IaaS implementation, which of the following would NOT be a metric used to quantify service charges for the cloud customer?

The goals of DLP solution implementation include all of the following, except: