ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 401:

  Tokenization requires two distinct _________________ .

  A. Authentication factors
  B. Personnel
  C. Databases
  D. Encryption
  C. Databases

• Question 402:

  Which component of ITIL involves the creation of an RFC ticket and obtaining official approvals for it?

  A. Problem management
  B. Release management
  C. Deployment management
  D. Change management
  D. Change management

• Question 403:

  When using a PaaS solution, what is the capability provided to the customer?

  A. To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The provider does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
  B. To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
  C. To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the consumer supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
  D. To deploy onto the cloud infrastructure provider-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
  B. To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.

• Question 404:

  Which of the cloud cross-cutting aspects relates to the oversight of processes and systems, as well as to ensuring their compliance with specific policies and regulations?

  A. Governance
  B. Regulatory requirements
  C. Service-level agreements
  D. Auditability
  D. Auditability

• Question 405:

  What does a cloud customer purchase or obtain from a cloud provider?

  A. Services
  B. Hosting
  C. Servers
  D. Customers
  A. Services

• Question 406:

  Which protocol, as a part of TLS, handles negotiating and establishing a connection between two parties?

  A. Record
  B. Binding
  C. Negotiation
  D. Handshake
  D. Handshake

• Question 407:

  What is the Cloud Security Alliance Cloud Controls Matrix (CCM)?

  A. A set of software development life cycle requirements for cloud service providers
  B. An inventory of cloud services security controls that are arranged into a hierarchy of security domains
  C. An inventory of cloud service security controls that are arranged into separate security domains
  D. A set of regulatory requirements for cloud service providers
  C. An inventory of cloud service security controls that are arranged into separate security domains

• Question 408:

  Whereas a contract articulates overall priorities and requirements for a business relationship, which artifact enumerates specific compliance requirements, metrics, and response times?

  A. Service level agreement
  B. Service level contract
  C. Service compliance contract
  D. Service level amendment
  A. Service level agreement

• Question 409:

  What's a potential problem when object storage versus volume storage is used within IaaS for application use and dependency?

  A. Object storage is only optimized for small files.
  B. Object storage is its own system, and data consistency depends on replication.
  C. Object storage may have availability issues.
  D. Object storage is dependent on access control from the host server.
  B. Object storage is its own system, and data consistency depends on replication.

• Question 410:

  Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?

  A. Platform
  B. Infrastructure
  C. Governance
  D. Application
  C. Governance