Question 1

What type of PII is controlled based on laws and carries legal penalties for noncompliance with requirements?

Accepted Answer

A)  Contractual 
B)  Regulated 
C)  Specific 
D)  Jurisdictional 
A)  Contractual 
B)  Regulated 
C)  Specific 
D)  Jurisdictional

Question 2

Which of the following best describes a sandbox?

Accepted Answer

A)  An isolated space where untested code and experimentation can safely occur separate from the production environment. 
B)  A space where you can safely execute malicious code to see what it does. 
C)  An isolated space where transactions are protected from malicious software 
D)  An isolated space where untested code and experimentation can safely occur within the production environment. 
A)  An isolated space where untested code and experimentation can safely occur separate from the production environment. 
B)  A space where you can safely execute malicious code to see what it does. 
C)  An isolated space where transactions are protected from malicious software 
D)  An isolated space where untested code and experimentation can safely occur within the production environment.

Question 3

When using a PaaS solution, what is the capability provided to the customer?

Accepted Answer

A)  To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The provider does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment. 
B)  To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment. 
C)  To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the consumer supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment. 
D)  To deploy onto the cloud infrastructure provider-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment. 
A)  To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The provider does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment. 
B)  To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment. 
C)  To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the consumer supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment. 
D)  To deploy onto the cloud infrastructure provider-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.

Question 4

A data custodian is responsible for which of the following?

Accepted Answer

A)  Data context 
B)  Data content 
C)  The safe custody, transport, storage of the data, and implementation of business rules 
D)  Logging access and alerts 
A)  Data context 
B)  Data content 
C)  The safe custody, transport, storage of the data, and implementation of business rules 
D)  Logging access and alerts

Question 5

Which of the following technologies is NOT commonly used for accessing systems and services in a cloud environment in a secure manner?

Accepted Answer

A)  KVM 
B)  HTTPS 
C)  VPN 
D)  TLS 
A)  KVM 
B)  HTTPS 
C)  VPN 
D)  TLS

Question 6

When using an IaaS solution, what is a key benefit provided to the customer?

Accepted Answer

A)  Metered and priced on the basis of units consumed 
B)  Increased energy and cooling system efficiencies 
C)  Transferred cost of ownership 
D)  The ability to scale up infrastructure services based on projected usage 
A)  Metered and priced on the basis of units consumed 
B)  Increased energy and cooling system efficiencies 
C)  Transferred cost of ownership 
D)  The ability to scale up infrastructure services based on projected usage

Question 7

Digital investigations have adopted many of the same methodologies and protocols as other types of criminal or scientific inquiries. What term pertains to the application of scientific norms and protocols to digital investigations?

Accepted Answer

A)  Scientific 
B)  Investigative 
C)  Methodological 
D)  Forensics 
A)  Scientific 
B)  Investigative 
C)  Methodological 
D)  Forensics

Question 8

Which of the following roles involves the provisioning and delivery of cloud services?

Accepted Answer

A)  Cloud service deployment manager 
B)  Cloud service business manager 
C)  Cloud service manager 
D)  Cloud service operations manager 
A)  Cloud service deployment manager 
B)  Cloud service business manager 
C)  Cloud service manager 
D)  Cloud service operations manager

Question 9

With software-defined networking (SDN), which two types of network operations are segregated to allow for granularity and delegation of administrative access and functions?

Accepted Answer

A)  Filtering and forwarding 
B)  Filtering and firewalling 
C)  Firewalling and forwarding 
D)  Forwarding and protocol 
A)  Filtering and forwarding 
B)  Filtering and firewalling 
C)  Firewalling and forwarding 
D)  Forwarding and protocol

Question 10

DLP solutions can aid in deterring loss due to which of the following?

Accepted Answer

A)  Power failure 
B)  Performance 
C)  Bad policy 
D)  Malicious disclosure 
A)  Power failure 
B)  Performance 
C)  Bad policy 
D)  Malicious disclosure

Question 11

Which of the following security measures done at the network layer in a traditional data center are also applicable to a cloud environment?

Accepted Answer

A)  Dedicated switches 
B)  Trust zones 
C)  Redundant network circuits 
D)  Direct connections 
A)  Dedicated switches 
B)  Trust zones 
C)  Redundant network circuits 
D)  Direct connections

Question 12

What is an often overlooked concept that is essential to protecting the confidentiality of data?

Accepted Answer

A)  Strong password 
B)  Training 
C)  Security controls 
D)  Policies 
A)  Strong password 
B)  Training 
C)  Security controls 
D)  Policies

Question 13

Limits for resource utilization can be set at different levels within a cloud environment to ensure that no particular entity can consume a level of resources that impacts other cloud customers. Which of the following is NOT a unit covered by limits?

Accepted Answer

A)  Hypervisor 
B)  Cloud customer 
C)  Virtual machine 
D)  Service 
A)  Hypervisor 
B)  Cloud customer 
C)  Virtual machine 
D)  Service

Question 14

Which United States law is focused on data related to health records and privacy?

Accepted Answer

A)  Safe Harbor 
B)  SOX 
C)  GLBA 
D)  HIPAA 
A)  Safe Harbor 
B)  SOX 
C)  GLBA 
D)  HIPAA

Question 15

Which technology can be useful during the "share" phase of the cloud data lifecycle to continue to protect data as it leaves the original system and security controls?

Accepted Answer

A)  IPS 
B)  WAF 
C)  DLP 
D)  IDS 
A)  IPS 
B)  WAF 
C)  DLP 
D)  IDS

Question 16

Within a federated identity system, which of the following would you be MOST likely to use for sending information for consumption by a relying party?

Accepted Answer

A)  XML 
B)  HTML 
C)  WS-Federation 
D)  SAML 
A)  XML 
B)  HTML 
C)  WS-Federation 
D)  SAML

Question 17

At which stage of the BCDR plan creation phase should security be included in discussions?

Accepted Answer

A)  Define scope 
B)  Analyze 
C)  Assess risk 
D)  Gather requirements 
A)  Define scope 
B)  Analyze 
C)  Assess risk 
D)  Gather requirements

Question 18

What does the management plane typically utilize to perform administrative functions on the hypervisors that it has access to?

Accepted Answer

A)  Scripts 
B)  RDP 
C)  APIs 
D)  XML 
A)  Scripts 
B)  RDP 
C)  APIs 
D)  XML

Question 19

What type of PII is regulated based on the type of application or per the conditions of the specific hosting agreement?

Accepted Answer

A)  Specific 
B)  Contractual 
C)  regulated 
D)  Jurisdictional 
A)  Specific 
B)  Contractual 
C)  regulated 
D)  Jurisdictional

Question 20

Security is a critical yet often overlooked consideration for BCDR planning. At which stage of the planning process should security be involved?

Accepted Answer

A)  Scope definition 
B)  Requirements gathering 
C)  Analysis 
D)  Risk assessment 
A)  Scope definition 
B)  Requirements gathering 
C)  Analysis 
D)  Risk assessment

What type of PII is controlled based on laws and carries legal penalties for noncompliance with requirements?

Which of the following best describes a sandbox?

When using a PaaS solution, what is the capability provided to the customer?

A data custodian is responsible for which of the following?

Which of the following technologies is NOT commonly used for accessing systems and services in a cloud environment in a secure manner?

When using an IaaS solution, what is a key benefit provided to the customer?

Digital investigations have adopted many of the same methodologies and protocols as other types of criminal or scientific inquiries. What term pertains to the application of scientific norms and protocols to digital investigations?

Which of the following roles involves the provisioning and delivery of cloud services?

With software-defined networking (SDN), which two types of network operations are segregated to allow for granularity and delegation of administrative access and functions?

DLP solutions can aid in deterring loss due to which of the following?

Which of the following security measures done at the network layer in a traditional data center are also applicable to a cloud environment?

What is an often overlooked concept that is essential to protecting the confidentiality of data?

Limits for resource utilization can be set at different levels within a cloud environment to ensure that no particular entity can consume a level of resources that impacts other cloud customers. Which of the following is NOT a unit covered by limits?

Which United States law is focused on data related to health records and privacy?

Which technology can be useful during the "share" phase of the cloud data lifecycle to continue to protect data as it leaves the original system and security controls?

Within a federated identity system, which of the following would you be MOST likely to use for sending information for consumption by a relying party?

At which stage of the BCDR plan creation phase should security be included in discussions?

What does the management plane typically utilize to perform administrative functions on the hypervisors that it has access to?

What type of PII is regulated based on the type of application or per the conditions of the specific hosting agreement?

Security is a critical yet often overlooked consideration for BCDR planning. At which stage of the planning process should security be involved?

Certified Authorization Professional

Certified Information Systems Security Professional

Filters

Exam 2: Certified Cloud Security Professional (CCSP)

What type of PII is controlled based on laws and carries legal penalties for noncompliance with requirements?

Which of the following best describes a sandbox?

When using a PaaS solution, what is the capability provided to the customer?

A data custodian is responsible for which of the following?

Which of the following technologies is NOT commonly used for accessing systems and services in a cloud environment in a secure manner?

When using an IaaS solution, what is a key benefit provided to the customer?

Digital investigations have adopted many of the same methodologies and protocols as other types of criminal or scientific inquiries. What term pertains to the application of scientific norms and protocols to digital investigations?

Which of the following roles involves the provisioning and delivery of cloud services?

With software-defined networking (SDN), which two types of network operations are segregated to allow for granularity and delegation of administrative access and functions?

DLP solutions can aid in deterring loss due to which of the following?

Which of the following security measures done at the network layer in a traditional data center are also applicable to a cloud environment?

What is an often overlooked concept that is essential to protecting the confidentiality of data?

Limits for resource utilization can be set at different levels within a cloud environment to ensure that no particular entity can consume a level of resources that impacts other cloud customers. Which of the following is NOT a unit covered by limits?

Which United States law is focused on data related to health records and privacy?

Which technology can be useful during the "share" phase of the cloud data lifecycle to continue to protect data as it leaves the original system and security controls?

Within a federated identity system, which of the following would you be MOST likely to use for sending information for consumption by a relying party?

At which stage of the BCDR plan creation phase should security be included in discussions?

What does the management plane typically utilize to perform administrative functions on the hypervisors that it has access to?

What type of PII is regulated based on the type of application or per the conditions of the specific hosting agreement?

Security is a critical yet often overlooked consideration for BCDR planning. At which stage of the planning process should security be involved?

Certified Authorization Professional

Certified Information Systems Security Professional

Filters