ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 291:

  What is the only data format permitted with the SOAP API?

  A. HTML
  B. SAML
  C. XSML
  D. XML
  D. XML

• Question 292:

  With a federated identity system, what does the identity provider send information to after a successful authentication?

  A. Relying party
  B. Service originator
  C. Service relay
  D. Service relay
  A. Relying party

• Question 293:

  Best practices for key management include all of the following, except:

  A. Ensure multifactor authentication
  B. Pass keys out of band
  C. Have key recovery processes
  D. Maintain key security
  A. Ensure multifactor authentication

• Question 294:

  Data center and operations design traditionally takes a tiered, topological approach.

  Which of the following standards is focused on that approach and is prevalently used throughout the industry?

  A. IDCA
  B. NFPA
  C. BICSI
  D. Uptime Institute
  D. Uptime Institute

• Question 295:

  Which of the following storage types is most closely associated with a database-type storage implementation?

  A. Object
  B. Unstructured
  C. Volume
  D. Structured
  D. Structured

• Question 296:

  Which of the following roles involves overseeing billing, purchasing, and requesting audit reports for an organization within a cloud environment?

  A. Cloud service user
  B. Cloud service business manager
  C. Cloud service administrator
  D. Cloud service integrator
  B. Cloud service business manager

• Question 297:

  An SLA contains the official requirements for contract performance and satisfaction between the cloud provider and cloud customer. Which of the following would NOT be a component with measurable metrics and requirements as part of an SLA?

  A. Network
  B. Users
  C. Memory
  D. CPU
  B. Users

• Question 298:

  When reviewing the BIA after a cloud migration, the organization should take into account new factors related to data breach impacts. One of these new factors is:

  A. Many states have data breach notification laws.
  B. Breaches can cause the loss of proprietary data.
  C. Breaches can cause the loss of intellectual property.
  D. Legal liability can't be transferred to the cloud provider.
  D. Legal liability can't be transferred to the cloud provider.

• Question 299:

  Which of the following threat types involves the sending of untrusted data to a user's browser to be executed with their own credentials and access?

  A. Missing function level access control
  B. Cross-site scripting
  C. Cross-site request forgery
  D. Injection
  B. Cross-site scripting

• Question 300:

  For service provisioning and support, what is the ideal amount of interaction between a cloud customer and cloud provider?

  A. Half
  B. Full
  C. Minimal
  D. Depends on the contract
  C. Minimal