ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 181:

  Which of the following is NOT a commonly used communications method within cloud environments to secure data in transit?

  A. IPSec
  B. HTTPS
  C. VPN
  D. DNSSEC
  D. DNSSEC

• Question 182:

  What does dynamic application security testing (DAST) NOT entail?

  A. Scanning
  B. Probing
  C. Discovery
  D. Knowledge of the system
  D. Knowledge of the system

• Question 183:

  Which of the following is NOT one of the components of multifactor authentication?

  A. Something the user knows
  B. Something the user has
  C. Something the user sends
  D. Something the user is
  C. Something the user sends

• Question 184:

  When using an IaaS solution, what is a key benefit provided to the customer?

  A. Metered and priced on the basis of units consumed
  B. Increased energy and cooling system efficiencies
  C. Transferred cost of ownership
  D. The ability to scale up infrastructure services based on projected usage
  A. Metered and priced on the basis of units consumed

• Question 185:

  Which United States law is focused on accounting and financial practices of organizations?

  A. Safe Harbor
  B. GLBA
  C. SOX
  D. HIPAA
  C. SOX

• Question 186:

  Which of the following best describes the purpose and scope of ISO/IEC 27034-1?

  A. Describes international privacy standards for cloud computing
  B. Serves as a newer replacement for NIST 800-52 r4
  C. Provides on overview of network and infrastructure security designed to secure cloud applications.
  D. Provides an overview of application security that introduces definitive concepts, principles, and processes involved in application security.
  D. Provides an overview of application security that introduces definitive concepts, principles, and processes involved in application security.

• Question 187:

  Which of the following is considered a physical control?

  A. Fences
  B. Ceilings
  C. Carpets
  D. Doors
  A. Fences

• Question 188:

  A localized incident or disaster can be addressed in a cost-effective manner by using which of the following?

  A. UPS
  B. Generators
  C. Joint operating agreements
  D. Strict adherence to applicable regulations
  C. Joint operating agreements

• Question 189:

  User access to the cloud environment can be administered in all of the following ways except:

  A. Provider provides administration on behalf the customer
  B. Customer directly administers access
  C. Third party provides administration on behalf of the customer
  D. Customer provides administration on behalf of the provider
  D. Customer provides administration on behalf of the provider

• Question 190:

  Which publication from the United States National Institute of Standards and Technology pertains to defining cloud concepts and definitions for the various core components of cloud computing?

  A. SP 800-153
  B. SP 800-145
  C. SP 800-53
  D. SP 800-40
  B. SP 800-145