ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 351:

  What type of PII is regulated based on the type of application or per the conditions of the specific hosting agreement?

  A. Specific
  B. Contractual
  C. regulated
  D. Jurisdictional
  B. Contractual

• Question 352:

  With an API, various features and optimizations are highly desirable to scalability, reliability, and security. What does the REST API support that the SOAP API does NOT support?

  A. Acceleration
  B. Caching
  C. Redundancy
  D. Encryption
  B. Caching

• Question 353:

  Every security program and process should have which of the following?

  A. Severe penalties
  B. Multifactor authentication
  C. Foundational policy
  D. Homomorphic encryption
  C. Foundational policy

• Question 354:

  Key maintenance and security are paramount within a cloud environment due to the widespread use of encryption for both data and transmissions.

  Which of the following key-management systems would provide the most robust control over and ownership of the key-management processes for the cloud customer?

  A. Remote key management service
  B. Local key management service
  C. Client key management service
  D. Internal key management service
  A. Remote key management service

• Question 355:

  Which of the following best describes a cloud carrier?

  A. The intermediary who provides connectivity and transport of cloud providers and cloud consumers
  B. A person or entity responsible for making a cloud service available to consumers
  C. The person or entity responsible for transporting data across the Internet
  D. The person or entity responsible for keeping cloud services running for customers
  A. The intermediary who provides connectivity and transport of cloud providers and cloud consumers

• Question 356:

  Which of the following statements best describes a Type 1 hypervisor?

  A. The hypervisor software runs within an operating system tied to the hardware.
  B. The hypervisor software runs as a client on a server and needs an external service to administer it.
  C. The hypervisor software runs on top of an application layer.
  D. The hypervisor software runs directly on "bare metal" without an intermediary.
  D. The hypervisor software runs directly on "bare metal" without an intermediary.

• Question 357:

  Which type of audit report is considered a "restricted use" report for its intended audience?

  A. SAS-70
  B. SSAE-16
  C. SOC Type 1
  D. SOC Type 2
  C. SOC Type 1

• Question 358:

  Which technology can be useful during the "share" phase of the cloud data lifecycle to continue to protect data as it leaves the original system and security controls?

  A. IPS
  B. WAF
  C. DLP
  D. IDS
  C. DLP

• Question 359:

  SOC Type 1 reports are considered "restricted use," in that they are intended only for limited audiences and purposes. Which of the following is NOT a population that would be appropriate for a SOC Type 1 report?

  A. Current clients
  B. Auditors
  C. Potential clients
  D. The service organization
  C. Potential clients

• Question 360:

  Although the REST API supports a wide variety of data formats for communications and exchange, which data formats are the most commonly used?

  A. SAML and HTML
  B. XML and SAML
  C. XML and JSON
  D. JSON and SAML
  C. XML and JSON