ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 321:

  Data masking can be used to provide all of the following functionality, except:

  A. Test data in sandboxed environments
  B. Authentication of privileged users
  C. Enforcing least privilege
  D. Secure remote access
  B. Authentication of privileged users

• Question 322:

  Legal controls refer to which of the following?

  A. ISO 27001
  B. PCI DSS
  C. NIST 800-53r4
  D. Controls designed to comply with laws and regulations related to the cloud environment
  D. Controls designed to comply with laws and regulations related to the cloud environment

• Question 323:

  Data labels could include all the following, except:

  A. Multifactor authentication
  B. Access restrictions
  C. Confidentiality level
  D. Distribution limitations
  A. Multifactor authentication

• Question 324:

  A crucial decision any company must make is in regard to where it hosts the data systems it depends on. A debate exists as to whether it's best to lease space in a data center or build your own data center--and now with cloud computing, whether to purchase resources within a cloud.

  What is the biggest advantage to leasing space in a data center versus procuring cloud services?

  A. Regulations
  B. Control
  C. Security
  D. Costs
  B. Control

• Question 325:

  Within an Infrastructure as a Service model, which of the following would NOT be a measured service?

  A. CPU
  B. Storage
  C. Number of users
  D. Memory
  C. Number of users

• Question 326:

  When an organization is considering a cloud environment for hosting BCDR solutions, which of the following would be the greatest concern?

  A. Self-service
  B. Resource pooling
  C. Availability
  D. Location
  D. Location

• Question 327:

  APIs are defined as which of the following?

  A. A set of protocols, and tools for building software applications to access a web-based software application or tool
  B. A set of routines, standards, protocols, and tools for building software applications to access a web-based software application or tool
  C. A set of standards for building software applications to access a web-based software application or tool
  D. A set of routines and tools for building software applications to access web-based software applications
  B. A set of routines, standards, protocols, and tools for building software applications to access a web-based software application or tool

• Question 328:

  BCDR strategies typically do not involve the entire operations of an organization, but only those deemed critical to their business. Which concept pertains to the amount of data and services needed to reach the predetermined level of operations?

  A. SRE
  B. RPO
  C. RSL
  D. RTO
  B. RPO

• Question 329:

  Just like the risk management process, the BCDR planning process has a defined sequence of steps and processes to follow to ensure the production of a comprehensive and successful plan. Which of the following is the correct sequence of steps for a BCDR plan?

  A. Define scope, gather requirements, assess risk, implement
  B. Define scope, gather requirements, implement, assess risk
  C. Gather requirements, define scope, implement, assess risk
  D. Gather requirements, define scope, assess risk, implement
  A. Define scope, gather requirements, assess risk, implement

• Question 330:

  Which of the cloud cross-cutting aspects relates to the assigning of jobs, tasks, and roles, as well as to ensuring they are successful and properly performed?

  A. Service-level agreements
  B. Governance
  C. Regulatory requirements
  D. Auditability
  B. Governance