2022 ExamCost ISC CCSP Dumps and Exam Test Engine
ISC CCSP DUMPS WITH REAL EXAM QUESTIONS
NEW QUESTION 435
Which of the cloud deployment models offers the easiest initial setup and access for the cloud customer?
- A. Private
- B. Hybrid
- C. Public
- D. Community
Answer: C
Explanation:
Explanation/Reference:
Explanation:
Because the public cloud model is available to everyone, in most instances all a customer will need to do to gain access is set up an account and provide a credit card number through the service's web portal. No additional contract negotiations, agreements, or specific group memberships are typically needed to get started.
NEW QUESTION 436
Which audit type has been largely replaced by newer approaches since 2011?
- A. SSAE-16
- B. SOC Type 2
- C. SAS-70
- D. SOC Type 1
Answer: C
Explanation:
Explanation/Reference:
Explanation:
SAS-70 reports were replaced in 2011 with the SSAE-16 reports throughout the industry.
NEW QUESTION 437
Administrative penalties for violating the General Data Protection Regulation (GDPR) can range up to ____________.
Response:
- A. 20,000,000 euros
- B. 500,000 euros
- C. 1,000,000 euros
- D. US$100,000
Answer: A
NEW QUESTION 438
An audit against the ________ will demonstrate that an organization has adequate security controls to meet its ISO 27001 requirements.
- A. NIST SP 800-53
- B. SSAE 16 standard
- C. ISO 27002 certification criteria
- D. SAS 70 standard
Answer: C
NEW QUESTION 439
In attempting to provide a layered defense, the security practitioner should convince senior management to include security controls of which type?
- A. technological
- B. All of the above
- C. Administrative
- D. Physical
Answer: B
Explanation:
Explanation
Layered defense calls for a diverse approach to security.
NEW QUESTION 440
Which of the following standards primarily pertains to cabling designs and setups in a data center?
- A. BICSI
- B. IDCA
- C. Uptime Institute
- D. NFPA
Answer: A
Explanation:
Explanation
The standards put out by Building Industry Consulting Service International (BICSI) primarily cover complex cabling designs and setups for data centers, but also include specifications on power, energy efficiency, and hot/cold aisle setups.
NEW QUESTION 441
What must SOAP rely on for security?
- A. SSL
- B. TLS
- C. Tokenization
- D. Encryption
Answer: D
Explanation:
Explanation/Reference:
Explanation:
Simple Object Access Protocol (SOAP) uses Extensible Markup Language (XML) for passing data, and it must rely on the encryption of those data packages for security.
NEW QUESTION 442
All of the following methods can be used to attenuate the harm caused by escalation of privilege except:
- A. Extensive access control and authentication tools and techniques
- B. Periodic and effective use of cryptographic sanitization tools
- C. The use of automated analysis tools such as SIM, SIEM, and SEM solutions
- D. Analysis and review of all log data by trained, skilled personnel on a frequent basis
Answer: B
NEW QUESTION 443
Which ITIL component focuses on ensuring that system resources, processes, and personnel are properly allocated to meet SLA requirements?
- A. Problem management
- B. Configuration management
- C. Availability management
- D. Continuity management
Answer: C
Explanation:
Availability management is focused on making sure system resources, processes, personnel, and toolsets are properly allocated and secured to meet SLA requirements. Continuity management (or business continuity management) is focused on planning for the successful restoration of systems or services after an unexpected outage, incident, or disaster. Configuration management tracks and maintains detailed information about all IT components within an organization. Problem management is focused on identifying and mitigating known problems and deficiencies before they occur.
NEW QUESTION 444
Which process serves to prove the identity and credentials of a user requesting access to an application or data?
- A. Authorization
- B. Identification
- C. Repudiation
- D. Authentication
Answer: D
Explanation:
Authentication is the process of proving whether the identity presented by a user is true and valid. This can be done through common mechanisms such as user ID and password combinations or with more secure methods such as multifactor authentication.
NEW QUESTION 445
With a cloud service category where the cloud customer is responsible for deploying all services, systems, and components needed for their applications, which of the following storage types are MOST likely to be available to them?
- A. Structured and unstructured
- B. Structured and hierarchical
- C. Volume and object
- D. Volume and database
Answer: C
Explanation:
Explanation/Reference:
Explanation:
The question is describing the Infrastructure as a Service (IaaS) cloud offering, and as such, the volume and object storage types will be available to the customer. Structured and unstructured are storage types associated with PaaS, and although the other answers present similar-sounding storage types, they are a mix of real and fake names.
NEW QUESTION 446
What are SOCI/SOCII/SOCIII?
Response:
- A. Risk management frameworks
- B. Audit reports
- C. Access controls
- D. Software development phases
Answer: B
NEW QUESTION 447
DLP solutions can aid in deterring loss due to which of the following?
- A. Natural disaster
- B. Inadvertent disclosure
- C. Randomization
- D. Device failure
Answer: B
Explanation:
Explanation/Reference:
Explanation:
DLP solutions may protect against inadvertent disclosure. Randomization is a technique for obscuring data, not a risk to data. DLP tools will not protect against risks from natural disasters, or against impacts due to device failure.
NEW QUESTION 448
Which of the following would NOT be used to determine the classification of data?
Response:
- A. PII
- B. Metadata
- C. Future use
- D. Creator
Answer: C
NEW QUESTION 449
DNSSEC was designed to add a layer of security to the DNS protocol.
Which type of attack was the DNSSEC extension designed to mitigate?
- A. Snooping
- B. Data exposure
- C. Account hijacking
- D. Spoofing
Answer: D
Explanation:
DNSSEC is an extension to the regular DNS protocol that utilizes digital signing of DNS query results, which can be verified to come from an authoritative source. This verification mitigates the ability for a rogue DNS server to be used to spoof query results and to direct users to malicious sites. DNSSEC provides for the verification of the integrity of DNS queries. It does not provide any protection from snooping or data exposure.
Although it may help lessen account hijacking by preventing users from being directed to rogue sites, it cannot by itself eliminate the possibility.
NEW QUESTION 450
Which of the following data-sanitation approaches are always available within a cloud environment?
Response:
- A. Cryptographic erasure
- B. Shredding
- C. Overwriting
- D. Physical destruction
Answer: A
NEW QUESTION 451
Which of the following could be used as a second component of multifactor authentication if a user has an RSA token?
- A. RFID
- B. USB thumb drive
- C. Access card
- D. Retina scan
Answer: D
Explanation:
Explanation
A retina scan could be used in conjunction with an RSA token because it is a biometric factor, and thus a different type of factor. An access card, RFID, and USB thumb drive are all items in possession of a user, the same as an RSA token, and as such would not be appropriate.
NEW QUESTION 452
When an organization implements an SIEM solution and begins aggregating event data, the configured event sources are only valid at the time it was configured.
Application modifications, patching, and other upgrades will change the events generated and how they are represented over time.
What process is necessary to ensure events are collected and processed with this in mind?
- A. Continual review
- B. Continuous optimization
- C. Aggregation updates
- D. Event elasticity
Answer: B
NEW QUESTION 453
A main objective for an organization when utilizing cloud services is to avoid vendor lock-in so as to ensure flexibility and maintain independence.
Which core concept of cloud computing is most related to vendor lock-in?
- A. Portability
- B. Interoperability
- C. Reversibility
- D. Scalability
Answer: A
Explanation:
Explanation/Reference:
Explanation:
Portability is the ability for a cloud customer to easily move their systems, services, and applications among different cloud providers. By avoiding reliance on proprietary APIs and other vendor-specific cloud features, an organization can maintain flexibility to move among the various cloud providers with greater ease. Reversibility refers to the ability for a cloud customer to quickly and easy remove all their services and data from a cloud provider. Interoperability is the ability to reuse services and components for other applications and uses. Scalability refers to the ability of a cloud environment to add or remove resources to meet current demands.
NEW QUESTION 454
......
2022 New ExamCost CCSP PDF Recently Updated Questions: https://pass4sure.examcost.com/CCSP-practice-exam.html
