ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 231:

  What masking strategy involves the replacing of sensitive data at the time it is accessed and used as it flows between the data and application layers of a service?

  A. Active
  B. Static
  C. Dynamic
  D. Transactional
  C. Dynamic

• Question 232:

  What is the best source for information about securing a physical asset's BIOS?

  A. Security policies
  B. Manual pages
  C. Vendor documentation
  D. Regulations
  C. Vendor documentation

• Question 233:

  Which of the following tasks within a SaaS environment would NOT be something the cloud customer would be responsible for?

  A. Authentication mechanism
  B. Branding
  C. Training
  D. User access
  A. Authentication mechanism

• Question 234:

  What type of data does data rights management (DRM) protect?

  A. Consumer
  B. PII
  C. Financial
  D. Healthcare
  A. Consumer

• Question 235:

  Which of the following is NOT a key area for performance monitoring as far as an SLA is concerned?

  A. CPU
  B. Users
  C. Memory
  D. Network
  B. Users

• Question 236:

  Which of the following threat types involves an application that does not validate authorization for portions of itself beyond when the user first enters it?

  A. Cross-site request forgery
  B. Missing function-level access control
  C. Injection
  D. Cross-site scripting
  B. Missing function-level access control

• Question 237:

  Which security concept would business continuity and disaster recovery fall under?

  A. Confidentiality
  B. Availability
  C. Fault tolerance
  D. Integrity
  B. Availability

• Question 238:

  Which of the following methods of addressing risk is most associated with insurance?

  A. Mitigation
  B. Transference
  C. Avoidance
  D. Acceptance
  B. Transference

• Question 239:

  What process is used within a clustered system to provide high availability and load balancing?

  A. Dynamic balancing
  B. Dynamic clustering
  C. Dynamic optimization
  D. Dynamic resource scheduling
  D. Dynamic resource scheduling

• Question 240:

  Upon completing a risk analysis, a company has four different approaches to addressing risk. Which approach it takes will be based on costs, available options, and adherence to any regulatory requirements from independent audits. Which of the following groupings correctly represents the four possible approaches?

  A. Accept, avoid, transfer, mitigate
  B. Accept, deny, transfer, mitigate
  C. Accept, deny, mitigate, revise
  D. Accept, dismiss, transfer, mitigate
  A. Accept, avoid, transfer, mitigate