ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 251:

  Which type of audit report does many cloud providers use to instill confidence in their policies, practices, and procedures to current and potential customers?

  A. SAS-70
  B. SOC 2
  C. SOC 1
  D. SOX
  B. SOC 2

• Question 252:

  Cryptographic keys for encrypted data stored in the cloud should be ________________ .

  A. Not stored with the cloud provider.
  B. Generated with redundancy
  C. At least 128 bits long
  D. Split into groups
  A. Not stored with the cloud provider.

• Question 253:

  Which of the cloud cross-cutting aspects relates to the requirements placed on a system or application by law, policy, or requirements from standards?

  A. regulatory requirements
  B. Auditability
  C. Service-level agreements
  D. Governance
  A. regulatory requirements

• Question 254:

  What concept does the "I" represent with the STRIDE threat model?

  A. Integrity
  B. Information disclosure
  C. IT security
  D. Insider threat
  B. Information disclosure

• Question 255:

  Which aspect of cloud computing pertains to cloud customers only paying for the resources and services they actually use?

  A. Metered service
  B. Measured billing
  C. Metered billing
  D. Measured service
  D. Measured service

• Question 256:

  Which of the following APIs are most commonly used within a cloud environment?

  A. REST and SAML
  B. SOAP and REST
  C. REST and XML
  D. XML and SAML
  B. SOAP and REST

• Question 257:

  What does SDN stand for within a cloud environment?

  A. Software-dynamic networking
  B. Software-defined networking
  C. Software-dependent networking
  D. System-dynamic nodes
  B. Software-defined networking

• Question 258:

  Which networking concept in a cloud environment allows for network segregation and isolation of IP spaces?

  A. PLAN
  B. WAN
  C. LAN
  D. VLAN
  D. VLAN

• Question 259:

  You were recently hired as a project manager at a major university to implement cloud services for the academic and administrative systems. Because the load and demand for services at a university are very cyclical in nature, commensurate with the academic calendar, which of the following aspects of cloud computing would NOT be a primary benefit to you?

  A. Measured service
  B. Broad network access
  C. Resource pooling
  D. On-demand self-service
  B. Broad network access

• Question 260:

  Which kind of SSAE audit reviews controls dealing with the organization's controls for assuring the confidentiality, integrity, and availability of data?

  A. SOC 1
  B. SOC 2
  C. SOC 3
  D. SOC 4
  B. SOC 2