ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 471:

  Which of the following is NOT a domain of the Cloud Controls Matrix (CCM)?

  A. Data center security
  B. Human resources
  C. Mobile security
  D. Budgetary and cost controls
  D. Budgetary and cost controls

• Question 472:

  What concept does the "T" represent in the STRIDE threat model?

  A. TLS
  B. Testing
  C. Tampering with data
  D. Transport
  C. Tampering with data

• Question 473:

  A comprehensive BCDR plan will encapsulate many or most of the traditional concerns of operating a system in any data center. However, what is one consideration that is often overlooked with the formulation of a BCDR plan?

  A. Availability of staff
  B. Capacity at the BCDR site
  C. Restoration of services
  D. Change management processes
  C. Restoration of services

• Question 474:

  Which of the following is a restriction that can be enforced by information rights management (IRM) that is not possible for traditional file system controls?

  A. Delete
  B. Modify
  C. Read
  D. Print
  D. Print

• Question 475:

  Without the extensive funds of a large corporation, a small-sized company could gain considerable and cost-effective services for which of the following concepts by moving to a cloud environment?

  A. Regulatory
  B. Security
  C. Testing
  D. Development
  B. Security

• Question 476:

  The goals of DLP solution implementation include all of the following, except:

  A. Elasticity
  B. Policy enforcement
  C. Data discovery
  D. Loss of mitigation
  A. Elasticity

• Question 477:

  Which of the following report is most aligned with financial control audits?

  A. SSAE 16
  B. SOC 2
  C. SOC 1
  D. SOC 3
  C. SOC 1

• Question 478:

  Which of the following areas of responsibility always falls completely under the purview of the cloud provider, regardless of which cloud service category is used?

  A. Infrastructure
  B. Data
  C. Physical
  D. Governance
  C. Physical

• Question 479:

  Which of the following would be considered an example of insufficient due diligence leading to security or operational problems when moving to a cloud?

  A. Monitoring
  B. Use of a remote key management system
  C. Programming languages used
  D. Reliance on physical network controls
  D. Reliance on physical network controls

• Question 480:

  When an API is being leveraged, it will encapsulate its data for transmission back to the requesting party or service. What is the data encapsulation used with the SOAP protocol referred to as?

  A. Packet
  B. Payload
  C. Object
  D. Envelope
  D. Envelope