ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 481:

  Which of the following best describes data masking?

  A. A method for creating similar but inauthentic datasets used for software testing and user training.
  B. A method used to protect prying eyes from data such as social security numbers and credit card data.
  C. A method where the last few numbers in a dataset are not obscured. These are often used for authentication.
  D. Data masking involves stripping out all digits in a string of numbers so as to obscure the original number.
  A. A method for creating similar but inauthentic datasets used for software testing and user training.

• Question 482:

  Which audit type has been largely replaced by newer approaches since 2011?

  A. SOC Type 1
  B. SSAE-16
  C. SAS-70
  D. SOC Type 2
  C. SAS-70

• Question 483:

  Which of the following approaches would NOT be considered sufficient to meet the requirements of secure data destruction within a cloud environment?

  A. Cryptographic erasure
  B. Zeroing
  C. Overwriting
  D. Deletion
  D. Deletion

• Question 484:

  What is the term we use to describe the general ease and efficiency of moving data from one cloud provider either to another cloud provider or down from the cloud?

  A. Obfuscation
  B. Elasticity
  C. Mobility
  D. Portability
  D. Portability

• Question 485:

  Which of the following represents a control on the maximum amount of resources that a single customer, virtual machine, or application can consume within a cloud environment?

  A. Share
  B. Reservation
  C. Provision
  D. Limit
  D. Limit

• Question 486:

  There is a large gap between the privacy laws of the United States and those of the European Union. Bridging this gap is necessary for American companies to do business with European companies and in European markets in many situations, as the American companies are required to comply with the stricter requirements.

  Which US program was designed to help companies overcome these differences?

  A. SOX
  B. HIPAA
  C. GLBA
  D. Safe Harbor
  D. Safe Harbor

• Question 487:

  When a system needs to be exposed to the public Internet, what type of secure system would be used to perform only the desired operations?

  A. Firewall
  B. Proxy
  C. Honeypot
  D. Bastion
  D. Bastion

• Question 488:

  Unlike SOC Type 1 reports, which are based on a specific point in time, SOC Type 2 reports are done over a period of time. What is the minimum span of time for a SOC Type 2 report?

  A. Six months
  B. One month
  C. One year
  D. One week
  A. Six months

• Question 489:

  What is one of the reasons a baseline might be changed?

  A. Numerous change requests
  B. To reduce redundancy
  C. Natural disaster
  D. Power fluctuation
  A. Numerous change requests

• Question 490:

  The European Union is often considered the world leader in regard to the privacy of personal data and has declared privacy to be a "human right." In what year did the EU first assert this principle?

  A. 1995
  B. 2000
  C. 2010
  D. 1999
  A. 1995