ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 1:

  Which cloud deployment model is MOST likely to offer free or very cheap services to users?

  A. Hybrid
  B. Community
  C. Public
  D. Private
  C. Public

• Question 2:

  Which of the following statements about Type 1 hypervisors is true?

  A. The hardware vendor and software vendor are different.
  B. The hardware vendor and software vendor are the same
  C. The hardware vendor provides an open platform for software vendors.
  D. The hardware vendor and software vendor should always be different for the sake of security.
  B. The hardware vendor and software vendor are the same

• Question 3:

  Apart from using encryption at the file system level, what technology is the most widely used to protect data stored in an object storage system?

  A. TLS
  B. HTTPS
  C. VPN
  D. IRM
  D. IRM

• Question 4:

  Which of the following threat types can occur when encryption is not properly applied or insecure transport mechanisms are used?

  A. Security misconfiguration
  B. Insecure direct object references
  C. Sensitive data exposure
  D. Unvalidated redirects and forwards
  C. Sensitive data exposure

• Question 5:

  Clustered systems can be used to ensure high availability and load balancing across individual systems through a variety of methodologies.

  What process is used within a clustered system to ensure proper load balancing and to maintain the health of the overall system to provide high availability?

  A. Distributed clustering
  B. Distributed balancing
  C. Distributed optimization
  D. Distributed resource scheduling
  D. Distributed resource scheduling

• Question 6:

  Hardening the operating system refers to all of the following except:

  A. Limiting administrator access
  B. Closing unused ports
  C. Removing antimalware agents
  D. Removing unnecessary services and libraries
  C. Removing antimalware agents

• Question 7:

  To protect data on user devices in a BYOD environment, the organization should consider requiring all the following, except: A. Multifactor authentication

  B. DLP agents
  C. Two-person integrity
  D. Local encryption
  C. Two-person integrity

• Question 8:

  Which of the cloud cross-cutting aspects relates to the ability to easily move services and applications between different cloud providers?

  A. Reversibility
  B. Availability
  C. Portability
  D. Interoperability
  C. Portability

• Question 9:

  Which cloud service category would be most ideal for a cloud customer that is developing software to test its applications among multiple hosting providers to determine the best option for its needs?

  A. DaaS
  B. PaaS
  C. IaaS
  D. SaaS
  B. PaaS

• Question 10:

  Data labels could include all the following, except:

  A. Distribution limitations
  B. Multifactor authentication
  C. Confidentiality level
  D. Access restrictions
  B. Multifactor authentication