Exam 2: Certified Cloud Security Professional (CCSP)

Which of the following represents a prioritization of applications or cloud customers for the allocation of additional requested resources when there is a limitation on available resources?

(Multiple Choice)

4.7/5

(59)

Question 161

Best practices for key management include all of the following, except:

(Multiple Choice)

4.9/5

(64)

Question 162

What is the best approach for dealing with services or utilities that are installed on a system but not needed to perform their desired function?

(Multiple Choice)

4.9/5

(72)

Question 163

Which protocol operates at the network layer and provides for full point-to-point encryption of all communications and transmissions?

(Multiple Choice)

4.9/5

(82)

Question 164

Which data state would be most likely to use digital signatures as a security protection mechanism?

(Multiple Choice)

4.9/5

(65)

Question 165

Which of the following is the biggest concern or challenge with using encryption?

(Multiple Choice)

4.8/5

(59)

Question 166

Within an Infrastructure as a Service model, which of the following would NOT be a measured service?

(Multiple Choice)

4.8/5

(80)

Question 167

With an application hosted in a cloud environment, who could be the recipient of an eDiscovery order?

(Multiple Choice)

4.8/5

(75)

Question 168

Many activities within a cloud environment are performed via programmatic means, where complex and distributed operations are handled without the need to perform each step individually. Which of the following concepts does this describe?

(Multiple Choice)

4.9/5

(72)

Question 169

Which of the following threat types can occur when an application does not properly validate input and can be leveraged to send users to malicious sites that appear to be legitimate?

(Multiple Choice)

4.9/5

(72)

Question 170

Which of the following frameworks focuses specifically on design implementation and management?

(Multiple Choice)

4.9/5

(71)

Question 171

What concept does the A represent within the DREAD model?

(Multiple Choice)

4.9/5

(91)

Question 172

Which data sanitation method is also commonly referred to as "zeroing"?

(Multiple Choice)

4.8/5

(76)

Question 173

Which data state would be most likely to use TLS as a protection mechanism?

(Multiple Choice)

4.9/5

(77)

Question 174

An audit scope statement defines the limits and outcomes from an audit. Which of the following would NOT be included as part of an audit scope statement?

(Multiple Choice)

4.8/5

(80)

Question 175

The most pragmatic option for data disposal in the cloud is which of the following?

(Multiple Choice)

4.8/5

(91)

Question 176

Which of the following roles would be responsible for managing memberships in federations and the use and integration of federated services?

(Multiple Choice)

5.0/5

(74)

Question 177

A UPS should have enough power to last how long?

(Multiple Choice)

4.9/5

(79)

Question 178

What does static application security testing (SAST) offer as a tool to the testers?

(Multiple Choice)

4.9/5

(69)

Question 179

Which kind of SSAE audit report is most beneficial for a cloud customer, even though it's unlikely the cloud provider will share it?

(Multiple Choice)

4.9/5

(87)

Question 180

Showing 161 - 180 of 501

Which of the following represents a prioritization of applications or cloud customers for the allocation of additional requested resources when there is a limitation on available resources?

Best practices for key management include all of the following, except:

What is the best approach for dealing with services or utilities that are installed on a system but not needed to perform their desired function?

Which protocol operates at the network layer and provides for full point-to-point encryption of all communications and transmissions?

Which data state would be most likely to use digital signatures as a security protection mechanism?

Which of the following is the biggest concern or challenge with using encryption?

Within an Infrastructure as a Service model, which of the following would NOT be a measured service?

With an application hosted in a cloud environment, who could be the recipient of an eDiscovery order?

Many activities within a cloud environment are performed via programmatic means, where complex and distributed operations are handled without the need to perform each step individually. Which of the following concepts does this describe?

Which of the following threat types can occur when an application does not properly validate input and can be leveraged to send users to malicious sites that appear to be legitimate?

Which of the following frameworks focuses specifically on design implementation and management?

What concept does the A represent within the DREAD model?

Which data sanitation method is also commonly referred to as "zeroing"?

Which data state would be most likely to use TLS as a protection mechanism?

An audit scope statement defines the limits and outcomes from an audit. Which of the following would NOT be included as part of an audit scope statement?

The most pragmatic option for data disposal in the cloud is which of the following?

Which of the following roles would be responsible for managing memberships in federations and the use and integration of federated services?

A UPS should have enough power to last how long?

What does static application security testing (SAST) offer as a tool to the testers?

Which kind of SSAE audit report is most beneficial for a cloud customer, even though it's unlikely the cloud provider will share it?

Certified Authorization Professional

Certified Information Systems Security Professional

Filters