ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 41:

  Identity and access management (IAM) is a security discipline that ensures which of the following?

  A. That all users are properly authorized
  B. That the right individual gets access to the right resources at the right time for the right reasons.
  C. That all users are properly authenticated
  D. That unauthorized users will get access to the right resources at the right time for the right reasons
  B. That the right individual gets access to the right resources at the right time for the right reasons.

• Question 42:

  Which of the following roles involves testing, monitoring, and securing cloud services for an organization?

  A. Cloud service integrator
  B. Cloud service business manager
  C. Cloud service user
  D. Cloud service administrator
  D. Cloud service administrator

• Question 43:

  DLP solutions can aid in deterring loss due to which of the following?

  A. Power failure
  B. Performance
  C. Bad policy
  D. Malicious disclosure
  D. Malicious disclosure

• Question 44:

  What are the two protocols that TLS uses?

  A. Handshake and record
  B. Transport and initiate
  C. Handshake and transport
  D. Record and transmit
  A. Handshake and record

• Question 45:

  To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:

  A. Access to audit logs and performance data
  B. DLP solution results
  C. Security control administration
  D. SIM, SEIM. and SEM logs
  C. Security control administration

• Question 46:

  Which of the following threat types involves the sending of commands or arbitrary data through input fields in an application in an attempt to get that code executed as part of normal processing?

  A. Cross-site scripting
  B. Missing function-level access control
  C. Injection
  D. Cross-site forgery
  C. Injection

• Question 47:

  Humidity levels for a data center are a prime concern for maintaining electrical and computing resources properly as well as ensuring that conditions are optimal for top performance. Which of the following is the optimal humidity level, as established by ASHRAE?

  A. 20 to 40 percent relative humidity
  B. 50 to 75 percent relative humidity
  C. 40 to 60 percent relative humidity
  D. 30 to 50 percent relative humidity
  C. 40 to 60 percent relative humidity

• Question 48:

  When crafting plans and policies for data archiving, we should consider all of the following, except:

  A. The backup process
  B. Immediacy of the technology
  C. Archive location
  D. The format of the data
  B. Immediacy of the technology

• Question 49:

  Which of the following best describes SAML?

  A. A standard used for directory synchronization
  B. A standard for developing secure application management logistics
  C. A standard for exchanging usernames and passwords across devices.
  D. A standards for exchanging authentication and authorization data between security domains.
  D. A standards for exchanging authentication and authorization data between security domains.

• Question 50:

  Cryptographic keys should be secured ________________ .

  A. To a level at least as high as the data they can decrypt
  B. In vaults
  C. With two-person integrity
  D. By armed guards
  A. To a level at least as high as the data they can decrypt