ISC CCSP Online Practice Questions and Exam Preparation

ISC CCSP Online Questions & Answers

• Question 81:

  What process entails taking sensitive data and removing the indirect identifiers from each data object so that the identification of a single entity would not be possible?

  A. Tokenization
  B. Encryption
  C. Anonymization
  D. Masking
  C. Anonymization

• Question 82:

  Which cloud service category most commonly uses client-side key management systems?

  A. Software as a Service
  B. Infrastructure as a Service
  C. Platform as a Service
  D. Desktop as a Service
  A. Software as a Service

• Question 83:

  Which of the following is considered a technological control?

  A. Firewall software
  B. Firing personnel
  C. Fireproof safe
  D. Fire extinguisher
  A. Firewall software

• Question 84:

  There are many situations when testing a BCDR plan is appropriate or mandated. Which of the following would not be a necessary time to test a BCDR plan?

  A. After software updates
  B. After regulatory changes
  C. After major configuration changes
  D. Annually
  B. After regulatory changes

• Question 85:

  Which phase of the cloud data lifecycle represents the first instance where security controls can be implemented?

  A. Use
  B. Share
  C. Store
  D. Create
  C. Store

• Question 86:

  One of the main components of system audits is the ability to track changes over time and to match these changes with continued compliance and internal processes. Which aspect of cloud computing makes this particular component more challenging than in a traditional data center?

  A. Portability
  B. Virtualization
  C. Elasticity
  D. Resource pooling
  B. Virtualization

• Question 87:

  When using an IaaS solution, what is the capability provided to the customer?

  A. To provision processing, storage, networks, and other fundamental computing resources when the consumer is able to deploy and run arbitrary software, which can include OSs and applications.
  B. To provision processing, storage, networks, and other fundamental computing resources when the auditor is able to deploy and run arbitrary software, which can include OSs and applications.
  C. To provision processing, storage, networks, and other fundamental computing resources when the provider is able to deploy and run arbitrary software, which can include OSs and applications.
  D. To provision processing, storage, networks, and other fundamental computing resources when the consumer is not able to deploy and run arbitrary software, which can include OSs and applications.
  A. To provision processing, storage, networks, and other fundamental computing resources when the consumer is able to deploy and run arbitrary software, which can include OSs and applications.

• Question 88:

  Which regulatory system pertains to the protection of healthcare data?

  A. HIPAA
  B. HAS
  C. HITECH
  D. HFCA
  A. HIPAA

• Question 89:

  Which of the following is NOT a regulatory system from the United States federal government?

  A. PCI DSS
  B. FISMA
  C. SOX
  D. HIPAA
  A. PCI DSS

• Question 90:

  Which of the following is NOT something that an HIDS will monitor?

  A. Configurations
  B. User logins
  C. Critical system files
  D. Network traffic
  B. User logins