Exam 2: Certified Cloud Security Professional (CCSP)

Most APIs will support a variety of different data formats or structures. However, the SOAP API will only support which one of the following data formats?

With a cloud service category where the cloud customer is provided a full application framework into which to deploy their code and services, which storage types are MOST likely to be available to them?

Which of the following is the sole responsibility of the cloud provider, regardless of which cloud model is used?

BCDR strategies typically do not involve the entire operations of an organization, but only those deemed critical to their business. Which concept pertains to the required amount of time to restore services to the predetermined level?

Which cloud storage type resembles a virtual hard drive and can be utilized in the same manner and with the same type of features and capabilities?

Which of the following is not a component of contractual PII?

If you are running an application that has strict legal requirements that the data cannot reside on systems that contain other applications or systems, which aspect of cloud computing would be prohibitive in this case?

Which of the following is the concept of segregating information or processes, within the same system or application, for security reasons?

Which of the following best describes SAML?

Which data formats are most commonly used with the REST API?

Which aspect of archiving must be tested regularly for the duration of retention requirements?

Which of the following is not a risk management framework?

Within a SaaS environment, what is the responsibility on the part of the cloud customer in regard to procuring the software used?

Which of the following is a commonly used tool for maintaining system configurations?

What type of storage structure does object storage employ to maintain files?

Which of the following is NOT a function performed by the handshake protocol of TLS?

One of the main components of system audits is the ability to track changes over time and to match these changes with continued compliance and internal processes. Which aspect of cloud computing makes this particular component more challenging than in a traditional data center?

What must be secured on physical hardware to prevent unauthorized access to systems?

Which data point that auditors always desire is very difficult to provide within a cloud environment?

Many of the traditional concepts of systems and services for a traditional data center also apply to the cloud. Both are built around key computing concepts. Which of the following compromise the two facets of computing?