ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 411:

  You are working for a cloud service provider and receive an eDiscovery order pertaining to one of your customers. Which of the following would be the most appropriate action to take first?

  A. Take a shapshot of the virtual machines
  B. Escrow the encryption keys
  C. Copy the data
  D. Notify the customer
  D. Notify the customer

• Question 412:

  When beginning an audit, both the system owner and the auditors must agree on various aspects of the final audit report. Which of the following would NOT be something that is predefined as part of the audit agreement?

  A. Size
  B. Format
  C. Structure
  D. Audience
  A. Size

• Question 413:

  What is the biggest benefit to leasing space in a data center versus building or maintain your own?

  A. Certification
  B. Costs
  C. Regulation
  D. Control
  B. Costs

• Question 414:

  IRM solutions allow an organization to place different restrictions on data usage than would otherwise be possible through traditional security controls. Which of the following controls would be possible with IRM that would not with traditional security controls?

  A. Copy
  B. Read
  C. Delete
  D. Print
  D. Print

• Question 415:

  What are third-party providers of IAM functions for the cloud environment?

  A. AESs
  B. SIEMs
  C. DLPs
  D. CASBs
  D. CASBs

• Question 416:

  In which cloud service model is the customer required to maintain the OS?

  A. Iaas
  B. CaaS
  C. PaaS
  D. SaaS
  A. Iaas

• Question 417:

  With an application hosted in a cloud environment, who could be the recipient of an eDiscovery order?

  A. Users
  B. Both the cloud provider and cloud customer
  C. The cloud customer
  D. The cloud provider
  B. Both the cloud provider and cloud customer

• Question 418:

  Which technology is NOT commonly used for security with data in transit?

  A. DNSSEC
  B. IPsec
  C. VPN
  D. HTTPS
  A. DNSSEC

• Question 419:

  Which protocol operates at the network layer and provides for full point-to-point encryption of all communications and transmissions?

  A. IPSec
  B. VPN
  C. SSL
  D. TLS
  A. IPSec

• Question 420:

  Which of the following is not a risk management framework?

  A. COBIT
  B. Hex GBL
  C. ISO 31000:2009
  D. NIST SP 800-37
  B. Hex GBL