ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 311:

  What changes are necessary to application code in order to implement DNSSEC?

  A. Adding encryption modules
  B. Implementing certificate validations
  C. Additional DNS lookups
  D. No changes are needed.
  D. No changes are needed.

• Question 312:

  What strategy involves replacing sensitive data with opaque values, usually with a means of mapping it back to the original value?

  A. Masking
  B. Anonymization
  C. Tokenization
  D. Obfuscation
  C. Tokenization

• Question 313:

  A UPS should have enough power to last how long?

  A. One day
  B. 12 hours
  C. Long enough for graceful shutdown
  D. 10 minutes
  D. 10 minutes

• Question 314:

  Which of the following threat types can occur when an application does not properly validate input and can be leveraged to send users to malicious sites that appear to be legitimate?

  A. Unvalidated redirects and forwards
  B. Insecure direct object references
  C. Security miscomfiguration
  D. Sensitive data exposure
  A. Unvalidated redirects and forwards

• Question 315:

  Which of the following is the least challenging with regard to eDiscovery in the cloud?

  A. Identifying roles such as data owner, controller and processor
  B. Decentralization of data storage
  C. Forensic analysis
  D. Complexities of International law
  C. Forensic analysis

• Question 316:

  Which of the following is NOT one of the main intended goals of a DLP solution?

  A. Showing due diligence
  B. Preventing malicious insiders
  C. Regulatory compliance
  D. Managing and minimizing risk
  B. Preventing malicious insiders

• Question 317:

  All of the following are techniques to enhance the portability of cloud data, in order to minimize the potential of vendor lock-in except:

  A. Ensure there are no physical limitations to moving
  B. Use DRM and DLP solutions widely throughout the cloud operation
  C. Ensure favorable contract terms to support portability
  D. Avoid proprietary data formats
  B. Use DRM and DLP solutions widely throughout the cloud operation

• Question 318:

  Tokenization requires two distinct _________________ .

  A. Personnel
  B. Authentication factors
  C. Encryption keys
  D. Databases
  D. Databases

• Question 319:

  In order to prevent cloud customers from potentially consuming enormous amounts of resources within a cloud environment and thus having a negative impact on other customers, what concept is commonly used by a cloud provider?

  A. Limit
  B. Cap
  C. Throttle
  D. Reservation
  A. Limit

• Question 320:

  What expectation of data custodians is made much more challenging by a cloud implementation, especially with PaaS or SaaS?

  A. Data classification
  B. Knowledge of systems
  C. Access to data
  D. Encryption requirements
  B. Knowledge of systems