Exam 2: Certified Cloud Security Professional (CCSP)

Which of the following would NOT be considered part of resource pooling with an Infrastructure as a Service implementation?

Which aspect of cloud computing serves as the biggest challenge to using DLP to protect data at rest?

Which phase of the cloud data lifecycle would be the MOST appropriate for the use of DLP technologies to protect the data?

Which jurisdiction lacks specific and comprehensive privacy laws at a national or top level of legal authority?

What is the concept of isolating an application from the underlying operating system for testing purposes?

Which of the following is NOT a regulatory system from the United States federal government?

A comprehensive BCDR plan will encapsulate many or most of the traditional concerns of operating a system in any data center. However, what is one consideration that is often overlooked with the formulation of a BCDR plan?

DLP solutions can aid in deterring loss due to which of the following?

Which security concept is focused on the trustworthiness of data?

Which of the cloud deployment models involves spanning multiple cloud environments or a mix of cloud hosting models?

What must SOAP rely on for security?

In the wake of many scandals with major corporations involving fraud and the deception of investors and regulators, which of the following laws was passed to govern accounting and financial records and disclosures?

Where is an XML firewall most commonly and effectively deployed in the environment?

Data labels could include all the following, except:

What concept does the "T" represent in the STRIDE threat model?

DLP can be combined with what other security technology to enhance data controls?

When an organization is considering the use of cloud services for BCDR planning and solutions, which of the following cloud concepts would be the most important?

Data masking can be used to provide all of the following functionality, except:

Your new CISO is placing increased importance and focus on regulatory compliance as your applications and systems move into cloud environments. Which of the following would NOT be a major focus of yours as you develop a project plan to focus on regulatory compliance?

Which approach is typically the most efficient method to use for data discovery?