ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 461:

  In addition to whatever audit results the provider shares with the customer, what other mechanism does the customer have to ensure trust in the provider's performance and duties?

  A. HIPAA
  B. The contract
  C. Statutes
  D. Security control matrix
  B. The contract

• Question 462:

  What is an often overlooked concept that is essential to protecting the confidentiality of data?

  A. Strong password
  B. Training
  C. Security controls
  D. Policies
  B. Training

• Question 463:

  What does the management plane typically utilize to perform administrative functions on the hypervisors that it has access to?

  A. Scripts
  B. RDP
  C. APIs
  D. XML
  C. APIs

• Question 464:

  Which of the following could be used as a second component of multifactor authentication if a user has an RSA token?

  A. Access card
  B. USB thumb drive
  C. Retina scan
  D. RFID
  C. Retina scan

• Question 465:

  Which of the following is not a risk management framework?

  A. COBIT
  B. Hex GBL
  C. ISO 31000:2009
  D. NIST SP 800-37
  B. Hex GBL

• Question 466:

  Which of the cloud deployment models offers the easiest initial setup and access for the cloud customer?

  A. Hybrid
  B. Community
  C. Private
  D. Public
  D. Public

• Question 467:

  Which of the following is the optimal humidity level for a data center, per the guidelines established by the America Society of Heating, Refrigeration, and Air Conditioning Engineers (ASHRAE)?

  A. 30-50 percent relative humidity
  B. 50-75 percent relative humidity
  C. 20-40 percent relative humidity
  D. 40-60 percent relative humidity
  D. 40-60 percent relative humidity

• Question 468:

  In attempting to provide a layered defense, the security practitioner should convince senior management to include security controls of which type?

  A. Physical
  B. All of the above
  C. technological
  D. Administrative
  B. All of the above

• Question 469:

  In the cloud motif, the data processor is usually:

  A. The cloud customer
  B. The cloud provider
  C. The cloud access security broker
  D. The party that assigns access rights
  B. The cloud provider

• Question 470:

  Which data state would be most likely to use digital signatures as a security protection mechanism?

  A. Data in use
  B. Data in transit
  C. Archived
  D. Data at rest
  A. Data in use