Aug-2023 Free ISC CCSP Exam Question Practice Exams [Q222-Q240]

5/5 - (1 vote)

Aug-2023 Free ISC CCSP Exam Question Practice Exams

Ace CCSP Certification with 830 Actual Questions

The CCSP certification exam is an industry-leading certification that covers a wide range of cloud security domains, including cloud data security, cloud platform and infrastructure security, cloud application security, operations, legal and compliance. Certified Cloud Security Professional certification exam is administered by the International Information System Security Certification Consortium (ISC)², a non-profit organization that sets the standard for information security certifications. Earning the CCSP certification demonstrates to employers and peers that the individual has the necessary knowledge and skills to implement and manage cloud security solutions in today’s complex and evolving cloud computing environment.

The CCSP exam is designed for professionals who have a minimum of five years of experience in information technology, with at least three years of experience in information security, and one year of experience in cloud computing. Certified Cloud Security Professional certification program covers a wide range of topics, including cloud data security, cloud application security, and cloud platform and infrastructure security.

Language of exam questions CCSP:

The language of questions asked in the ISC CCSP exam is English.

NEW QUESTION 222
On large distributed systems with pooled resources, cloud computing relies on extensive orchestration to maintain the environment and the constant provisioning of resources.
Which of the following is crucial to the orchestration and automation of networking resources within a cloud?

DNSSEC

DNS

DCOM

DHCP

The Dynamic Host Configuration Protocol (DHCP) automatically configures network settings for a host so that these settings do not need to be configured on the host statically. Given the rapid and programmatic provisioning of resources within a cloud environment, this capability is crucial to cloud operations. Both DNS and its security-integrity extension DNSSEC provide name resolution to IP addresses, but neither is used for the configuration of network settings on a host.
DCOM refers to the Distributed Component Object Model, which was developed by Microsoft as a means to request services across a network, and is not used for network configurations at all.

NEW QUESTION 223
Which aspect of cloud computing pertains to cloud customers only paying for the resources and services they actually use?

Metered service

Measured billing

Metered billing

Measured service

Explanation/Reference:
Explanation:
Measured service is the aspect of cloud computing that pertains to cloud services and resources being billed in a metered way, based only on the level of consumption and duration of the cloud customer.
Although they sound similar to the correct answer, none of the other choices is the actual cloud terminology.

NEW QUESTION 224
The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing.
According to the CSA, what is one reason the threat of insecure interfaces and APIs is so prevalent in cloud computing?

Most of the cloud customer’s interaction with resources will be performed through APIs.

APIs are inherently insecure.

Attackers have already published vulnerabilities for all known APIs.

APIs are known carcinogens.

NEW QUESTION 225
Which of the following roles involves the provisioning and delivery of cloud services?

Cloud service deployment manager

Cloud service business manager

Cloud service manager

Cloud service operations manager

Explanation
The cloud service manager is responsible for the delivery of cloud services, the provisioning of cloud services, and the overall management of cloud services.

NEW QUESTION 226
Which of the following could be used as a second component of multifactor authentication if a user has an RSA token?

Access card

USB thumb drive

Retina scan

RFID

Explanation/Reference:
Explanation:
A retina scan could be used in conjunction with an RSA token because it is a biometric factor, and thus a different type of factor. An access card, RFID, and USB thumb drive are all items in possession of a user, the same as an RSA token, and as such would not be appropriate.

NEW QUESTION 227
While an audit is being conducted, which of the following could cause management and the auditors to change the original plan in order to continue with the audit?
Response:

Cost overruns

Impact on systems

Regulatory changes

Software version changes

NEW QUESTION 228
Which of the following statements best describes a Type 1 hypervisor?

The hypervisor software runs within an operating system tied to the hardware.

The hypervisor software runs as a client on a server and needs an external service to administer it.

The hypervisor software runs on top of an application layer.

The hypervisor software runs directly on “bare metal” without an intermediary.

With a Type 1 hypervisor, the hypervisor software runs directly on top of the bare-metal system, without any intermediary layer or hosting system. None of these statements describes a Type 1 hypervisor.

NEW QUESTION 229
Which of the following roles involves the provisioning and delivery of cloud services?

Cloud service deployment manager

Cloud service business manager

Cloud service manager

Cloud service operations manager

Explanation
Explanation:
The cloud service manager is responsible for the delivery of cloud services, the provisioning of cloud services, and the overall management of cloud services.

NEW QUESTION 230
Which of the following top security threats involves attempting to send invalid commands to an application in an attempt to get the application to execute the code?
Response:

Cross-site scripting

Injection

Insecure direct object references

Cross-site request forgery

NEW QUESTION 231
If you’re using iSCSI in a cloud environment, what must come from an external protocol or application?

Kerberos support

CHAP support

Authentication

Encryption

Explanation
iSCSI does not natively support encryption, so another technology such as IPsec must be used to encrypt communications.

NEW QUESTION 232
Your IT steering committee has, at a high level, approved your project to begin using cloud services. However, the committee is concerned with getting locked into a single cloud provider and has flagged the ability to easily move between cloud providers as a top priority. It also wants to save costs by reusing components.
Which cross-cutting aspect of cloud computing would be your primary focus as your project plan continues to develop and you begin to evaluate cloud providers?

Interoperability

Resiliency

Scalability

Portability

Interoperability is ability to easily move between cloud providers, by either moving or reusing components and services. This can pertain to any cloud deployment model, and it gives organizations the ability to constantly evaluate costs and services as well as move their business to another cloud provider as needed or desired.
Portability relates to the wholesale moving of services from one cloud provider to another, not necessarily the reuse of components or services for other purposes. Although resiliency is not an official concept within cloud computing, it certainly would be found throughout other topics such as elasticity, auto-scaling, and resource pooling. Scalability pertains to changing resource allocations to a service to meet current demand, either upward or downward in scope.

NEW QUESTION 233
Every cloud service provider that opts to join the CSA STAR program registry must complete a
___________.

SOC 2, Type 2 audit report

Consensus Assessment Initiative Questionnaire (CAIQ)

NIST 800-37 RMF audit

ISO 27001 ISMS review

NEW QUESTION 234
What type of data does data rights management (DRM) protect?

Consumer

PII

Financial

Healthcare

DRM applies to the protection of consumer media, such as music, publications, video, movies, and soon.

NEW QUESTION 235
When designing a cloud data center, which of the following aspects is not necessary to ensure continuity of operations during contingency operations?
Response:

Access to clean water

Broadband data connection

Extended battery backup

Physical access to the data center

NEW QUESTION 236
Which cloud service category most commonly uses client-side key management systems?

Software as a Service

Infrastructure as a Service

Platform as a Service

Desktop as a Service

SaaS most commonly uses client-side key management. With this type of implementation, the software for doing key management is supplied by the cloud provider, but is hosted and run by the cloud customer. This allows for full integration with the SaaS implementation, but also provides full control to the cloud customer.
Although the cloud provider may offer software for performing key management to the cloud customers, with the Infrastructure, Platform, and Desktop as a Service categories, the customers would largely be responsible for their own options and implementations and would not be bound by the offerings from the cloud provider.

NEW QUESTION 237
What is an experimental technology that is intended to create the possibility of processing encrypted data without having to decrypt it first?

Quantum-state

Polyinstantiation

Homomorphic

Gastronomic

Explanation
Homomorphic encryption hopes to achieve that goal; the other options are terms that have almost nothing to do with encryption.

NEW QUESTION 238
Which of the following best describes a cloud carrier?

The intermediary who provides connectivity and transport of cloud providers and cloud consumers

A person or entity responsible for making a cloud service available to consumers

The person or entity responsible for transporting data across the Internet

The person or entity responsible for keeping cloud services running for customers

Explanation/Reference:
Explanation:
A cloud carrier is the intermediary who provides connectivity and transport of cloud services between cloud providers and cloud customers.

NEW QUESTION 239
The cloud deployment model that features joint ownership of assets among an affinity group is known as:
Response:

Private

Public

Hybrid

Community

NEW QUESTION 240
An SLA contains the official requirements for contract performance and satisfaction between the cloud provider and cloud customer. Which of the following would NOT be a component with measurable metrics and requirements as part of an SLA?

Network

Users

Memory

CPU

Explanation
Dealing with users or user access would not be an appropriate item for inclusion in an SLA specifically.
However, user access and user experience would be covered indirectly through other metrics. Memory, CPU, and network resources are all typically included within an SLA for availability and response times when dealing with any incidents.

Loading …