Exam 2: Certified Cloud Security Professional (CCSP)

Which is the lowest level of the CSA STAR program?

As part of the auditing process, getting a report on the deviations between intended configurations and actual policy is often crucial for an organization. What term pertains to the process of generating such a report?

Which of the following is the optimal temperature for a data center, per the guidelines established by the America Society of Heating, Refrigeration, and Air Conditioning Engineers (ASHRAE)?

With a federated identity system, where would a user perform their authentication when requesting services or application access?

Many tools and technologies are available for securing or monitoring data in transit within a data center, whether it is a traditional data center or a cloud. Which of the following is NOT a technology for securing data in transit?

During the course of an audit, which of the following would NOT be an input into the control requirements used as part of a gap analysis.

Along with humidity, temperature is crucial to a data center for optimal operations and protection of equipment. Which of the following is the optimal temperature range as set by ASHRAE?

With an API, various features and optimizations are highly desirable to scalability, reliability, and security. What does the REST API support that the SOAP API does NOT support?

What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?

What does static application security testing (SAST) offer as a tool to the testers that makes it unique compared to other common security testing methodologies?

Which type of controls are the SOC Type 1 reports specifically focused on?

What does a cloud customer purchase or obtain from a cloud provider?

Which if the following is NOT one of the three components of a federated identity system transaction?

What concept and operational process must be spelled out clearly, as far as roles and responsibilities go, between the cloud provider and cloud customer for the mitigation of any problems or security events?

Which of the following are cloud computing roles?

Which of the following is NOT a factor that is part of a firewall configuration?

Which component of ITIL involves handling anything that can impact services for either internal or public users?

Which data protection strategy would be useful for a situation where the ability to remove sensitive data from a set is needed, but a requirement to retain the ability to map back to the original values is also present?

Which of the following roles is responsible for peering with other cloud services and providers?

What type of security threat is DNSSEC designed to prevent?