ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 221:

  Three central concepts define what type of data and information an organization is responsible for pertaining to eDiscovery. Which of the following are the three components that comprise required disclosure?

  A. Possession, ownership, control
  B. Ownership, use, creation
  C. Control, custody, use
  D. Possession, custody, control
  D. Possession, custody, control

• Question 222:

  What concept does the "A" represent in the DREAD model?

  A. Affected users
  B. Authentication
  C. Affinity
  D. Authorization
  A. Affected users

• Question 223:

  Which of the following is not a way to manage risk?

  A. Transferring
  B. Accepting
  C. Mitigating
  D. Enveloping
  D. Enveloping

• Question 224:

  With software-defined networking (SDN), which two types of network operations are segregated to allow for granularity and delegation of administrative access and functions?

  A. Filtering and forwarding
  B. Filtering and firewalling
  C. Firewalling and forwarding
  D. Forwarding and protocol
  A. Filtering and forwarding

• Question 225:

  Which of the following is NOT part of a retention policy?

  A. Format
  B. Costs
  C. Accessibility
  D. Duration
  B. Costs

• Question 226:

  Which of the following publishes the most commonly used standard for data center design in regard to tiers and topologies?

  A. IDCA
  B. Uptime Institute
  C. NFPA
  D. BICSI
  B. Uptime Institute

• Question 227:

  What is the experimental technology that might lead to the possibility of processing encrypted data without having to decrypt it first?

  A. AES
  B. Link encryption
  C. One-time pads
  D. Homomorphic encryption
  D. Homomorphic encryption

• Question 228:

  What is the correct order of the phases of the data life cycle?

  A. Create, Use, Store, Share, Archive, Destroy
  B. Create, Archive, Store, Share, Use, Destroy
  C. Create, Store, Use, Archive, Share, Destroy
  D. Create, Store, Use, Share, Archive, Destroy
  D. Create, Store, Use, Share, Archive, Destroy

• Question 229:

  Although the United States does not have a single, comprehensive privacy and regulatory framework, a number of specific regulations pertain to types of data or populations. Which of the following is NOT a regulatory system from the United States federal government?

  A. HIPAA
  B. SOX
  C. FISMA
  D. PCI DSS
  D. PCI DSS

• Question 230:

  Which aspect of cloud computing would make the use of a cloud the most attractive as a BCDR solution?

  A. Interoperability
  B. Resource pooling
  C. Portability
  D. Measured service
  D. Measured service