ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 441:

  If you are running an application that has strict legal requirements that the data cannot reside on systems that contain other applications or systems, which aspect of cloud computing would be prohibitive in this case?

  A. Multitenancy
  B. Broad network access
  C. Portability
  D. Elasticity
  A. Multitenancy

• Question 442:

  The goals of SIEM solution implementation include all of the following, except:

  A. Dashboarding
  B. Performance enhancement
  C. Trend analysis
  D. Centralization of log streams
  B. Performance enhancement

• Question 443:

  For performance purposes, OS monitoring should include all of the following except:

  A. Disk space
  B. Disk I/O usage
  C. CPU usage
  D. Print spooling
  D. Print spooling

• Question 444:

  In order to ensure ongoing compliance with regulatory requirements, which phase of the cloud data lifecycle must be tested regularly?

  A. Archive
  B. Share
  C. Store
  D. Destroy
  A. Archive

• Question 445:

  DLP solutions can aid in deterring loss due to which of the following?

  A. Inadvertent disclosure
  B. Natural disaster
  C. Randomization
  D. Device failure
  A. Inadvertent disclosure

• Question 446:

  Proper implementation of DLP solutions for successful function requires which of the following?

  A. Physical access limitations
  B. USB connectivity
  C. Accurate data categorization
  D. Physical presence
  C. Accurate data categorization

• Question 447:

  Which of the following threat types involves leveraging a user's browser to send untrusted data to be executed with legitimate access via the user's valid credentials?

  A. Injection
  B. Missing function-level access control
  C. Cross-site scripting
  D. Cross-site request forgery
  D. Cross-site request forgery

• Question 448:

  What must SOAP rely on for security since it does not provide security as a built-in capability?

  A. Encryption
  B. Tokenization
  C. TLS
  D. SSL
  A. Encryption

• Question 449:

  Within an IaaS implementation, which of the following would NOT be a metric used to quantify service charges for the cloud customer?

  A. Memory
  B. Number of users
  C. Storage
  D. CPU
  B. Number of users

• Question 450:

  From a security perspective, which of the following is a major concern when evaluating possible BCDR solutions?

  A. Access provisioning
  B. Auditing
  C. Jurisdictions
  D. Authorization
  C. Jurisdictions