ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 421:

  When using a SaaS solution, what is the capability provided to the customer?

  A. To use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a program interface. The consumer does manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
  B. To use the consumer's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
  C. To use the consumer's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a program interface. The consumer does manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
  D. To use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
  D. To use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.

• Question 422:

  What type of PII is controlled based on laws and carries legal penalties for noncompliance with requirements?

  A. Contractual
  B. Regulated
  C. Specific
  D. Jurisdictional
  B. Regulated

• Question 423:

  During which phase of the cloud data lifecycle is it possible for the classification of data to change?

  A. Use
  B. Archive
  C. Create
  D. Share
  C. Create

• Question 424:

  Which of the following is NOT considered a type of data loss?

  A. Data corruption
  B. Stolen by hackers
  C. Accidental deletion
  D. Lost or destroyed encryption keys
  B. Stolen by hackers

• Question 425:

  Which United States law is focused on data related to health records and privacy?

  A. Safe Harbor
  B. SOX
  C. GLBA
  D. HIPAA
  D. HIPAA

• Question 426:

  Which data point that auditors always desire is very difficult to provide within a cloud environment?

  A. Access policy
  B. Systems architecture
  C. Baselines
  D. Privacy statement
  B. Systems architecture

• Question 427:

  Many of the traditional concepts of systems and services for a traditional data center also apply to the cloud. Both are built around key computing concepts. Which of the following compromise the two facets of computing?

  A. CPU and software
  B. CPU and storage
  C. CPU and memory
  D. Memory and networking
  C. CPU and memory

• Question 428:

  What strategy involves hiding data in a data set to prevent someone from identifying specific individuals based on other data fields present?

  A. Anonymization
  B. Tokenization
  C. Masking
  D. Obfuscation
  A. Anonymization

• Question 429:

  DLP can be combined with what other security technology to enhance data controls?

  A. DRM
  B. Hypervisor
  C. SIEM
  D. Kerberos
  A. DRM

• Question 430:

  What is the intellectual property protection for a confidential recipe for muffins?

  A. Patent
  B. Trademark
  C. Trade secret
  D. Copyright
  C. Trade secret