Exam 2: Certified Cloud Security Professional (CCSP)

Which type of audit report is considered a "restricted use" report for its intended audience?

Which type of audit report does many cloud providers use to instill confidence in their policies, practices, and procedures to current and potential customers?

DLP solutions can aid in deterring loss due to which of the following?

Proper implementation of DLP solutions for successful function requires which of the following?

Which aspect of SaaS will alleviate much of the time and energy organizations spend on compliance (specifically baselines)?

What process is used within a clustered system to provide high availability and load balancing?

Over time, what is a primary concern for data archiving?

Which cloud storage type is typically used to house virtual machine images that are used throughout the environment?

Which protocol, as a part of TLS, handles the actual secure communications and transmission of data?

Which of the following types of data would fall under data rights management (DRM) rather than information rights management (IRM)?

Which publication from the United States National Institute of Standards and Technology pertains to defining cloud concepts and definitions for the various core components of cloud computing?

Which crucial aspect of cloud computing can be most threatened by insecure APIs?

What are the two protocols that TLS uses?

What changes are necessary to application code in order to implement DNSSEC?

Cryptographic keys for encrypted data stored in the cloud should be ________________ .

Which of the following security technologies is commonly used to give administrators access into trust zones within an environment?

Which United States law is focused on PII as it relates to the financial industry?

Having a reservation in a cloud environment can ensure operations continue in the event of high utilization across the cloud. Which of the following would NOT be a capability covered by reservations?

Which of the cloud cross-cutting aspects relates to the ability to easily move services and applications between different cloud providers?

Which of the following threat types involves an application that does not validate authorization for portions of itself after the initial checks?