ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 51:

  The GAPP framework was developed through a joint effort between the major Canadian and American professional accounting associations in order to assist their members with managing and preventing risks to the privacy of their data and customers.

  Which of the following is the meaning of GAPP?

  A. General accounting personal privacy
  B. Generally accepted privacy practices
  C. Generally accepted privacy principles
  D. General accounting privacy policies
  C. Generally accepted privacy principles

• Question 52:

  Which cloud deployment model would be ideal for a group of universities looking to work together, where each university can gain benefits according to its specific needs?

  A. Private
  B. Public
  C. Hybrid
  D. Community
  D. Community

• Question 53:

  Many aspects and features of cloud computing can make eDiscovery compliance more difficult or costly. Which aspect of cloud computing would be the MOST complicating factor?

  A. Measured service
  B. Broad network access
  C. Multitenancy
  D. Portability
  C. Multitenancy

• Question 54:

  Which term relates to the application of scientific methods and practices to evidence?

  A. Forensics
  B. Methodical
  C. Theoretical
  D. Measured
  A. Forensics

• Question 55:

  Above and beyond general regulations for data privacy and protection, certain types of data are subjected to more rigorous regulations and oversight. Which of the following is not a regulatory framework for more sensitive or specialized data?

  A. FIPS 140-2
  B. FedRAMP
  C. PCI DSS
  D. HIPAA
  A. FIPS 140-2

• Question 56:

  Which of the following is not a component of contractual PII?

  A. Scope of processing
  B. Value of data
  C. Location of data
  D. Use of subcontractors
  C. Location of data

• Question 57:

  Which of the cloud deployment models requires the cloud customer to be part of a specific group or organization in order to host cloud services within it?

  A. Community
  B. Hybrid
  C. Private
  D. Public
  A. Community

• Question 58:

  Which of the following threat types can occur when baselines are not appropriately applied or when unauthorized changes are made?

  A. Security misconfiguration
  B. Insecure direct object references
  C. Unvalidated redirects and forwards
  D. Sensitive data exposure
  A. Security misconfiguration

• Question 59:

  Which of the cloud cross-cutting aspects relates to the ability for a cloud customer to easily remove their applications and data from a cloud environment?

  A. Reversibility
  B. Availability
  C. Portability
  D. Interoperability
  A. Reversibility

• Question 60:

  Which of the following is a valid risk management metric?

  A. KPI
  B. KRI
  C. SOC
  D. SLA
  B. KRI