Download Exam CCSP Practice Test Questions with 100% Verified Answers
Share Latest CCSPTest Practice Test Questions, Exam Dumps
NEW QUESTION # 24
Which of the following statements about Type 1 hypervisors is true?
- A. The hardware vendor and software vendor should always be different for the sake of security.
- B. The hardware vendor and software vendor are different.
- C. The hardware vendor and software vendor are the same
- D. The hardware vendor provides an open platform for software vendors.
Answer: C
Explanation:
Explanation
With a Type 1 hypervisor, the management software and hardware are tightly tied together and provided by the same vendor on a closed platform. This allows for optimal security, performance, and support. The other answers are all incorrect descriptions of a Type 1 hypervisor.
NEW QUESTION # 25
Which of the following report is most aligned with financial control audits?
- A. SSAE 16
- B. SOC 1
- C. SOC 3
- D. SOC 2
Answer: B
Explanation:
Explanation/Reference:
Explanation:
The SOC 1 report focuses primarily on controls associated with financial services. While IT controls are certainly part of most accounting systems today, the focus is on the controls around those financial systems.
NEW QUESTION # 26
Which process serves to prove the identity and credentials of a user requesting access to an application or data?
- A. Authentication
- B. Identification
- C. Authorization
- D. Repudiation
Answer: A
Explanation:
Explanation
Authentication is the process of proving whether the identity presented by a user is true and valid. This can be done through common mechanisms such as user ID and password combinations or with more secure methods such as multifactor authentication.
NEW QUESTION # 27
Of the following, which is probably the most significant risk in a managed cloud environment?
Response:
- A. Physical attack on the utility service lines
- B. Management plane breach
- C. Guest escape
- D. DDoS
Answer: B
NEW QUESTION # 28
Which ISO/IEC standards set documents the cloud definitions for staffing and official roles?
Response:
- A. ISO/IEC 17789
- B. ISO/IEC 17788
- C. ISO/IEC 27040
- D. ISO/IEC 27001
Answer: B
NEW QUESTION # 29
An organization could have many reasons that are common throughout the industry to activate a BCDR situation. Which of the following is NOT a typical reason to activate a BCDR plan?
- A. Staff loss
- B. Terrorist attack
- C. Natural disaster
- D. Utility outage
Answer: A
NEW QUESTION # 30
Which component of ITIL involves the creation of an RFC ticket and obtaining official approvals for it?
- A. Change management
- B. Problem management
- C. Deployment management
- D. Release management
Answer: A
Explanation:
The change management process involves the creation of the official Request for Change (RFC) ticket, which is used to document the change, obtain the required approvals from management and stakeholders, and track the change to completion. Release management is a subcomponent of change management, where the actual code or configuration change is put into place.
Deployment management is similar to release management, but it's where changes are actually implemented on systems. Problem management is focused on the identification and mitigation of known problems and deficiencies before they are able to occur.
NEW QUESTION # 31
Which of the following terms is NOT a commonly used category of risk acceptance?
- A. Moderate
- B. Accepted
- C. Minimal
- D. Critical
Answer: B
Explanation:
Explanation
Accepted is not a risk acceptance category. The risk acceptance categories are minimal, low, moderate, high, and critical.
NEW QUESTION # 32
Which value refers to the percentage of production level restoration needed to meet BCDR objectives?
- A. RPO
- B. RSL
- C. RTO
- D. SRE
Answer: B
Explanation:
The recovery service level (RSL) is a percentage measure of the total typical production service level that needs to be restored to meet BCDR objectives in the case of a failure.
NEW QUESTION # 33
Which technique involves replacing values within a specific data field to protect sensitive data?
- A. Tokenization
- B. Obfuscation
- C. Anonymization
- D. Masking
Answer: D
Explanation:
Masking involves replacing specific data within a data set with new values. For example, with credit card fields, as most who have ever purchased anything online can attest, nearly the entire credit card number is masked with a character such as an asterisk, with the last four digits left visible for identification and confirmation.
NEW QUESTION # 34
____________ can often be the result of inadvertent activity.
- A. Phishing
- B. Sprawl
- C. Disasters
- D. DDoS
Answer: B
NEW QUESTION # 35
The different cloud service models have varying levels of responsibilities for functions and operations depending with the model's level of service.
In which of the following models would the responsibility for patching lie predominantly with the cloud customer?
- A. IaaS
- B. PaaS
- C. DaaS
- D. SaaS
Answer: A
Explanation:
Explanation
With Infrastructure as a Service (IaaS), the cloud customer is responsible for deploying and maintaining its own systems and virtual machines. Therefore, the customer is solely responsible for patching and any other security updates it finds necessary. With Software as a Service (SaaS), Platform as a Service (PaaS), and Desktop as a Service (DaaS), the cloud provider maintains the infrastructure components and is responsible for maintaining and patching them.
NEW QUESTION # 36
You work for a government research facility. Your organization often shares data with other government research organizations.
You would like to create a single sign-on experience across the organizations, where users at each organization can sign in with the user ID/authentication issued by that organization, then access research data in all the other organizations.
Instead of replicating the data stores of each organization at every other organization (which is one way of accomplishing this goal), you instead want every user to have access to each organization's specific storage resources.
If you don't use cross-certification, what other model can you implement for this purpose?
Response:
- A. Cloud reseller
- B. Intractable nuanced variance
- C. Mandatory access control (MAC)
- D. Third-party identity broker
Answer: D
NEW QUESTION # 37
Which of the following is NOT one of the components of multifactor authentication?
- A. Something the user sends
- B. Something the user is
- C. Something the user knows
- D. Something the user has
Answer: A
Explanation:
Explanation/Reference:
Explanation:
Multifactor authentication systems are composed of something the user knows, has, and/or is, not something the user sends. Multifactor authentication commonly uses something that a user knows, has, and/or is (such as biometrics or features).
NEW QUESTION # 38
What is used for local, physical access to hardware within a data center?
- A. VPN
- B. KVM
- C. RDP
- D. SSH
Answer: B
Explanation:
Explanation/Reference:
Explanation:
Local, physical access in a data center is done via KVM (keyboard, video, mouse) switches.
NEW QUESTION # 39
You are working for a cloud service provider and receive an eDiscovery order pertaining to one of your customers.
Which of the following would be the most appropriate action to take first?
- A. Copy the data
- B. Escrow the encryption keys
- C. Take a shapshot of the virtual machines
- D. Notify the customer
Answer: D
Explanation:
When a cloud service provider receives an eDiscovery order pertaining to one of their customers, the first action they must take is to notify the customer. This allows the customer to be aware of what was received, as well as to conduct a review to determine if any challenges are necessary or warranted. Taking snapshots of virtual machines, copying data, and escrowing encryption keys are all processes involved in the actual collection of data and should not be performed until the customer has been notified of the request.
NEW QUESTION # 40
What is the biggest challenge to data discovery in a cloud environment?
- A. Multitenancy
- B. Format
- C. Location
- D. Ownership
Answer: C
Explanation:
Explanation/Reference:
Explanation:
With the distributed nature of cloud environments, the foremost challenge for data discovery is awareness of the location of data and keeping track of it during the constant motion of cloud storage systems.
NEW QUESTION # 41
In addition to whatever audit results the provider shares with the customer, what other mechanism does the customer have to ensure trust in the provider's performance and duties?
- A. Security control matrix
- B. The contract
- C. Statutes
- D. HIPAA
Answer: B
Explanation:
The contract between the provider and customer enhances the customer's trust by holding the provider financially liable for negligence or inadequate service (although the customer remains legally liable for all inadvertent disclosures). Statutes, however, largely leave customers liable. The security control matrix is a tool for ensuring compliance with regulations. HIPAA is a statute.
NEW QUESTION # 42
......
Positive Aspects of Valid Dumps CCSP Exam Dumps!: https://troytec.validtorrent.com/CCSP-valid-exam-torrent.html