Question 1

Which of the following would NOT be a reason to activate a BCDR strategy?

Accepted Answer

A)  Staffing loss 
B)  Terrorism attack 
C)  Utility disruptions 
D)  Natural disaster 
A)  Staffing loss 
B)  Terrorism attack 
C)  Utility disruptions 
D)  Natural disaster

Question 2

Which of the cloud deployment models requires the cloud customer to be part of a specific group or organization in order to host cloud services within it?

Accepted Answer

A)  Community 
B)  Hybrid 
C)  Private 
D)  Public 
A)  Community 
B)  Hybrid 
C)  Private 
D)  Public

Question 3

What is used for local, physical access to hardware within a data center?

Accepted Answer

A)  SSH 
B)  KVM 
C)  VPN 
D)  RDP 
A)  SSH 
B)  KVM 
C)  VPN 
D)  RDP

Question 4

What is one of the reasons a baseline might be changed?

Accepted Answer

A)  Numerous change requests 
B)  To reduce redundancy 
C)  Natural disaster 
D)  Power fluctuation 
A)  Numerous change requests 
B)  To reduce redundancy 
C)  Natural disaster 
D)  Power fluctuation

Question 5

When an organization is considering a cloud environment for hosting BCDR solutions, which of the following would be the greatest concern?

Accepted Answer

A)  Self-service 
B)  Resource pooling 
C)  Availability 
D)  Location 
A)  Self-service 
B)  Resource pooling 
C)  Availability 
D)  Location

Question 6

What process entails taking sensitive data and removing the indirect identifiers from each data object so that the identification of a single entity would not be possible?

Accepted Answer

A)  Tokenization 
B)  Encryption 
C)  Anonymization 
D)  Masking 
A)  Tokenization 
B)  Encryption 
C)  Anonymization 
D)  Masking

Question 7

With software-defined networking, what aspect of networking is abstracted from the forwarding of traffic?

Accepted Answer

A)  Routing 
B)  Session 
C)  Filtering 
D)  Firewalling 
A)  Routing 
B)  Session 
C)  Filtering 
D)  Firewalling

Question 8

When reviewing the BIA after a cloud migration, the organization should take into account new factors related to data breach impacts. One of these new factors is:

Accepted Answer

A)  Many states have data breach notification laws. 
B)  Breaches can cause the loss of proprietary data. 
C)  Breaches can cause the loss of intellectual property. 
D)  Legal liability can't be transferred to the cloud provider. 
A)  Many states have data breach notification laws. 
B)  Breaches can cause the loss of proprietary data. 
C)  Breaches can cause the loss of intellectual property. 
D)  Legal liability can't be transferred to the cloud provider.

Question 9

Which of the following is a valid risk management metric?

Accepted Answer

A)  KPI 
B)  KRI 
C)  SOC 
D)  SLA 
A)  KPI 
B)  KRI 
C)  SOC 
D)  SLA

Question 10

A DLP solution/implementation has three main components. Which of the following is NOT one of the three main components?

Accepted Answer

A)  Monitoring 
B)  Enforcement 
C)  Auditing 
D)  Discovery and classification 
A)  Monitoring 
B)  Enforcement 
C)  Auditing 
D)  Discovery and classification

Question 11

Which component of ITIL involves the creation of an RFC ticket and obtaining official approvals for it?

Accepted Answer

A)  Problem management 
B)  Release management 
C)  Deployment management 
D)  Change management 
A)  Problem management 
B)  Release management 
C)  Deployment management 
D)  Change management

Question 12

From a security perspective, what component of a cloud computing infrastructure represents the biggest concern?

Accepted Answer

A)  Hypervisor 
B)  Management plane 
C)  Object storage 
D)  Encryption 
A)  Hypervisor 
B)  Management plane 
C)  Object storage 
D)  Encryption

Question 13

The REST API is a widely used standard for communications of web-based services between clients and the servers hosting them. Which protocol does the REST API depend on?

Accepted Answer

A)  HTTP 
B)  SSH 
C)  SAML 
D)  XML 
A)  HTTP 
B)  SSH 
C)  SAML 
D)  XML

Question 14

Which of the following represents a control on the maximum amount of resources that a single customer, virtual machine, or application can consume within a cloud environment?

Accepted Answer

A)  Share 
B)  Reservation 
C)  Provision 
D)  Limit 
A)  Share 
B)  Reservation 
C)  Provision 
D)  Limit

Question 15

All of the following are techniques to enhance the portability of cloud data, in order to minimize the potential of vendor lock-in except:

Accepted Answer

A)  Ensure there are no physical limitations to moving 
B)  Use DRM and DLP solutions widely throughout the cloud operation 
C)  Ensure favorable contract terms to support portability 
D)  Avoid proprietary data formats 
A)  Ensure there are no physical limitations to moving 
B)  Use DRM and DLP solutions widely throughout the cloud operation 
C)  Ensure favorable contract terms to support portability 
D)  Avoid proprietary data formats

Question 16

Which of the following areas of responsibility would be shared between the cloud customer and cloud provider within the Software as a Service (SaaS) category?

Accepted Answer

A)  Data 
B)  Governance 
C)  Application 
D)  Physical 
A)  Data 
B)  Governance 
C)  Application 
D)  Physical

Question 17

If a company needed to guarantee through contract and SLAs that a cloud provider would always have available sufficient resources to start their services and provide a certain level of provisioning, what would the contract need to refer to?

Accepted Answer

A)  Limit 
B)  Reservation 
C)  Assurance 
D)  Guarantee 
A)  Limit 
B)  Reservation 
C)  Assurance 
D)  Guarantee

Question 18

Which of the following is NOT a domain of the Cloud Controls Matrix (CCM)?

Accepted Answer

A)  Data center security 
B)  Human resources 
C)  Mobile security 
D)  Budgetary and cost controls 
A)  Data center security 
B)  Human resources 
C)  Mobile security 
D)  Budgetary and cost controls

Question 19

Who would be responsible for implementing IPsec to secure communications for an application?

Accepted Answer

A)  Developers 
B)  Systems staff 
C)  Auditors 
D)  Cloud customer 
A)  Developers 
B)  Systems staff 
C)  Auditors 
D)  Cloud customer

Question 20

Firewalls are used to provide network security throughout an enterprise and to control what information can be accessed--and to a certain extent, through what means. Which of the following is NOT something that firewalls are concerned with?

Accepted Answer

A)  IP address 
B)  Encryption 
C)  Port 
D)  Protocol 
A)  IP address 
B)  Encryption 
C)  Port 
D)  Protocol

Which of the following would NOT be a reason to activate a BCDR strategy?

Which of the cloud deployment models requires the cloud customer to be part of a specific group or organization in order to host cloud services within it?

What is used for local, physical access to hardware within a data center?

What is one of the reasons a baseline might be changed?

When an organization is considering a cloud environment for hosting BCDR solutions, which of the following would be the greatest concern?

What process entails taking sensitive data and removing the indirect identifiers from each data object so that the identification of a single entity would not be possible?

With software-defined networking, what aspect of networking is abstracted from the forwarding of traffic?

When reviewing the BIA after a cloud migration, the organization should take into account new factors related to data breach impacts. One of these new factors is:

Which of the following is a valid risk management metric?

A DLP solution/implementation has three main components. Which of the following is NOT one of the three main components?

Which component of ITIL involves the creation of an RFC ticket and obtaining official approvals for it?

From a security perspective, what component of a cloud computing infrastructure represents the biggest concern?

The REST API is a widely used standard for communications of web-based services between clients and the servers hosting them. Which protocol does the REST API depend on?

Which of the following represents a control on the maximum amount of resources that a single customer, virtual machine, or application can consume within a cloud environment?

All of the following are techniques to enhance the portability of cloud data, in order to minimize the potential of vendor lock-in except:

Which of the following areas of responsibility would be shared between the cloud customer and cloud provider within the Software as a Service (SaaS) category?

If a company needed to guarantee through contract and SLAs that a cloud provider would always have available sufficient resources to start their services and provide a certain level of provisioning, what would the contract need to refer to?

Which of the following is NOT a domain of the Cloud Controls Matrix (CCM)?

Who would be responsible for implementing IPsec to secure communications for an application?

Firewalls are used to provide network security throughout an enterprise and to control what information can be accessed--and to a certain extent, through what means. Which of the following is NOT something that firewalls are concerned with?

Certified Authorization Professional

Certified Information Systems Security Professional

Filters

Exam 2: Certified Cloud Security Professional (CCSP)

Which of the following would NOT be a reason to activate a BCDR strategy?

Which of the cloud deployment models requires the cloud customer to be part of a specific group or organization in order to host cloud services within it?

What is used for local, physical access to hardware within a data center?

What is one of the reasons a baseline might be changed?

When an organization is considering a cloud environment for hosting BCDR solutions, which of the following would be the greatest concern?

What process entails taking sensitive data and removing the indirect identifiers from each data object so that the identification of a single entity would not be possible?

With software-defined networking, what aspect of networking is abstracted from the forwarding of traffic?

When reviewing the BIA after a cloud migration, the organization should take into account new factors related to data breach impacts. One of these new factors is:

Which of the following is a valid risk management metric?

A DLP solution/implementation has three main components. Which of the following is NOT one of the three main components?

Which component of ITIL involves the creation of an RFC ticket and obtaining official approvals for it?

From a security perspective, what component of a cloud computing infrastructure represents the biggest concern?

The REST API is a widely used standard for communications of web-based services between clients and the servers hosting them. Which protocol does the REST API depend on?

Which of the following represents a control on the maximum amount of resources that a single customer, virtual machine, or application can consume within a cloud environment?

All of the following are techniques to enhance the portability of cloud data, in order to minimize the potential of vendor lock-in except:

Which of the following areas of responsibility would be shared between the cloud customer and cloud provider within the Software as a Service (SaaS) category?

If a company needed to guarantee through contract and SLAs that a cloud provider would always have available sufficient resources to start their services and provide a certain level of provisioning, what would the contract need to refer to?

Which of the following is NOT a domain of the Cloud Controls Matrix (CCM)?

Who would be responsible for implementing IPsec to secure communications for an application?

Firewalls are used to provide network security throughout an enterprise and to control what information can be accessed--and to a certain extent, through what means. Which of the following is NOT something that firewalls are concerned with?

Certified Authorization Professional

Certified Information Systems Security Professional

Filters