[Dec-2021] Verified CCSP dumps Q&As - CCSP dumps with Correct Answers

The Best ISC Cloud Security Study Guide for the CCSP Exam

Legal, Compliance, & Risk (13%):

• Understand Cloud contract design and outsourcing.
• Understand the audit process, required adaptations, and methodologies for the Cloud environment;
• Understand the inferences of Cloud/enterprise risk management;
• Understand the privacy issues;
• Explain the legal prerequisites and distinctive risks associated with the Cloud environment;

 

NEW QUESTION 220
BCDR strategies do not typically involve the entire operations of an organization, but only those deemed critical to their business.
Which concept pertains to the amount of services that need to be recovered to meet BCDR objectives?

• A. RSL
• B. RTO
• C. SRE
• D. RPO

Answer: A

Explanation:
Explanation/Reference:
Explanation:
The recovery service level (RSL) measures the percentage of operations that would be recovered during a BCDR situation. The recovery point objective (RPO) sets and defines the amount of data an organization must have available or accessible to reach the determined level of operations necessary during a BCDR situation.
The recovery time objective (RTO) measures the amount of time necessary to recover operations to meet the BCDR plan. SRE is provided as an erroneous response.

 

NEW QUESTION 221
____________ can often be the result of inadvertent activity.
Response:

• A. Sprawl
• B. Phishing
• C. Disasters
• D. DDoS

Answer: A

 

NEW QUESTION 222
Your new CISO is placing increased importance and focus on regulatory compliance as your applications and systems move into cloud environments.
Which of the following would NOT be a major focus of yours as you develop a project plan to focus on regulatory compliance?

• A. Data in use
• B. Data at rest
• C. Data in transit
• D. Data custodian

Answer: D

Explanation:
Explanation
The jurisdictions where data is being stored, processed, or consumed are the ones that dictate the regulatory frameworks and compliance requirements, regardless of who the data owner or custodian might be. The other concepts for protecting data would all play a prominent role in regulatory compliance with a move to the cloud environment. Each concept needs to be evaluated based on the new configurations as well as any potential changes in jurisdiction or requirements introduced with the move to a cloud.

 

NEW QUESTION 223
In addition to whatever audit results the provider shares with the customer, what other mechanism does the customer have to ensure trust in the provider's performance and duties?

• A. Statutes
• B. The contract
• C. HIPAA
• D. Security control matrix

Answer: B

Explanation:
The contract between the provider and customer enhances the customer's trust by holding the provider financially liable for negligence or inadequate service (although the customer remains legally liable for all inadvertent disclosures). Statutes, however, largely leave customers liable. The security control matrix is a tool for ensuring compliance with regulations. HIPAA is a statute.

 

NEW QUESTION 224
When an organization is considering a cloud environment for hosting BCDR solutions, which of the following would be the greatest concern?

• A. Self-service
• B. Availability
• C. Resource pooling
• D. Location

Answer: D

Explanation:
Explanation
If an organization wants to use a cloud service for BCDR, the location of the cloud hosting becomes a very important security consideration due to regulations and jurisdiction, which could be dramatically different from the organization's normal hosting locations. Availability is a hallmark of any cloud service provider, and likely will not be a prime consideration when an organization is considering using a cloud for BCDR; the same goes for self-service options. Resource pooling is common among all cloud systems and would not be a concern when an organization is dealing with the provisioning of resources during a disaster.

 

NEW QUESTION 225
Setting thermostat controls by measuring the temperature will result in the ________ highest energy costs.
Response:

• A. Server inlet
• B. Return air
• C. Under-floor
• D. External ambient

Answer: B

 

NEW QUESTION 226
Which of the following is an example of useful and sufficient data masking of the string "CCSP"?
Response:

• A. TtLp
• B. 3X91
• C. XCSP
• D. PSCC

Answer: A

 

NEW QUESTION 227
What type of data does data rights management (DRM) protect?

• A. Consumer
• B. Financial
• C. Healthcare
• D. PII

Answer: A

Explanation:
Explanation/Reference:
Explanation:
DRM applies to the protection of consumer media, such as music, publications, video, movies, and soon.

 

NEW QUESTION 228
Resolving resource contentions in the cloud will most likely be the job of the ____________.

• A. Regulator
• B. Router
• C. Hypervisor
• D. Emulator

Answer: C

 

NEW QUESTION 229
Which of the cloud cross-cutting aspects relates to the requirements placed on the cloud provider by the cloud customer for minimum performance standards and requirements that must be met?

• A. Auditability
• B. SLAs
• C. Regulatory requirements
• D. Governance

Answer: B

Explanation:
Whereas a contract spells out general terms and costs for services, the SLA is where the real meat of the business relationship and concrete requirements come into play. The SLA spells out in clear terms the minimum requirements for uptime, availability, processes, customer service and support, security controls and requirements, auditing and reporting, and potentially many other areas that define the business relationship and the success of it.

 

NEW QUESTION 230
Which of the following practices can enhance both operational capabilities and configuration management efforts?

• A. File hashes
• B. Regular backups
• C. Multifactor authentication
• D. Constant uptime

Answer: A

 

NEW QUESTION 231
Which phase of the cloud data lifecycle represents the first instance where security controls can be implemented?

• A. Create
• B. Store
• C. Share
• D. Use

Answer: B

Explanation:
The store phase occurs immediately after the create phase, and as data is committed to storage structures, the first opportunity for security controls to be implemented is realized. During the create phase, the data is not yet part of a system where security controls can be applied, and although the use and share phases also entail the application of security controls, they are not the first phase where the process occurs.

 

NEW QUESTION 232
Which of the following is not a risk management framework?

• A. Hex GBL
• B. NIST SP 800-37
• C. ISO 31000:2009
• D. COBIT

Answer: A

Explanation:
Hex GBL is a reference to a computer part in Terry Pratchett's fictional Discworld universe. The rest are not.

 

NEW QUESTION 233
Log data should be protected ____________.
Response:

• A. According to NIST guidelines
• B. With encryption in transit, at rest, and in use
• C. At least at the same sensitivity level as the systems from which it was collected
• D. One level below the sensitivity level of the systems from which it was collected

Answer: C

 

NEW QUESTION 234
Which of the following should NOT be part of the requirement analysis phase of the software development lifecycle?

• A. Functionality
• B. Software platform
• C. Security requirements
• D. Programming languages

Answer: C

Explanation:
Explanation
Security requirements should be incorporated into the software development lifecycle (SDLC) from the earliest requirement gathering stage and should be incorporated prior to the requirement analysis phase.

 

NEW QUESTION 235
SOX was enacted because of which of the following?

• A. All of the above
• B. Poor financial controls
• C. Poor BOD oversight
• D. Lack of independent audits

Answer: A

 

NEW QUESTION 236
A user signs on to a cloud-based social media platform. In another browser tab, the user finds an article worth posting to the social media platform. The user clicks on the platform's icon listed on the article's website, and the article is automatically posted to the user's account on the social media platform.
This is an example of what?
Response:

• A. Identity federation
• B. Single sign-on
• C. Cross-site scripting
• D. Insecure direct identifiers

Answer: A

 

NEW QUESTION 237
Which of the following is NOT a factor that is part of a firewall configuration?

• A. Port
• B. Protocol
• C. Source IP
• D. Encryption

Answer: D

Explanation:
Explanation/Reference:
Explanation:
Firewalls take into account source IP, destination IP, the port the traffic is using, as well as the network protocol (UDP/TCP). Whether or not the traffic is encrypted is not something a firewall is concerned with.

 

NEW QUESTION 238
Humidity levels for a data center are a prime concern for maintaining electrical and computing resources properly as well as ensuring that conditions are optimal for top performance.
Which of the following is the optimal humidity level, as established by ASHRAE?

• A. 30 to 50 percent relative humidity
• B. 40 to 60 percent relative humidity
• C. 20 to 40 percent relative humidity
• D. 50 to 75 percent relative humidity

Answer: B

Explanation:
The American Society of Heating, Refrigeration, and Air Conditioning Engineers (ASHRAE) recommends 40 to 60 percent relatively humidity for data centers. None of these options is the recommendation from ASHRAE.

 

NEW QUESTION 239
Which of the following report is most aligned with financial control audits?

• A. SOC 2
• B. SOC 3
• C. SSAE 16
• D. SOC 1

Answer: D

Explanation:
Explanation/Reference:
Explanation:
The SOC 1 report focuses primarily on controls associated with financial services. While IT controls are certainly part of most accounting systems today, the focus is on the controls around those financial systems.

 

NEW QUESTION 240
Many aspects and features of cloud computing can make eDiscovery compliance more difficult or costly.
Which aspect of cloud computing would be the MOST complicating factor?

• A. Multitenancy
• B. Broad network access
• C. Measured service
• D. Portability

Answer: A

Explanation:
Explanation
With multitenancy, multiple customers share the same physical hardware and systems. With the nature of a cloud environment and how it writes data across diverse systems that are shared by others, the process of eDiscovery becomes much more complicated. Administrators cannot pull physical drives or easily isolate which data to capture. They not only have to focus on which data they need to collect, while ensuring they find all of it, but they also have to make sure that other data is not accidently collected and exposed along with it.
Measured service is the aspect of a cloud where customers only pay for the services they are actually using, and for the duration of their use. Portability refers to the ease with which an application or service can be moved among different cloud providers. Broad network access refers to the nature of cloud services being accessed via the public Internet, either with or without secure tunneling technologies. None of these concepts would pertain to eDiscovery.

 

NEW QUESTION 241
What are the two protocols that TLS uses?

• A. Transport and initiate
• B. Record and transmit
• C. Handshake and transport
• D. Handshake and record

Answer: D

Explanation:
TLS uses the handshake protocol to establish and negotiate the TLS connection, and it uses the record protocol for the secure transmission of data.

 

NEW QUESTION 242
Anonymization is the process of removing from data sets.
Response:

• A. Cryptographic keys
• B. Numeric values
• C. Access
• D. Identifying information

Answer: D

 

NEW QUESTION 243
......

ISC Certified Cloud Security Professional CCSP Exam

ISC Certified Cloud Security Professional CCSP Exam which is related to ISC Certified Cloud Security Professional Certification. This exam validates the Candidate ability in cloud security design, implementation, architecture, operations, controls, and compliance with regulatory frameworks. It also deals with the ability to demonstrates competence in cloud security architecture, design, operations, and service orchestration.

 

CCSP certification guide Q&A from Training Expert TestSimulate: https://www.testsimulate.com/CCSP-study-materials.html