Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Certified Cloud Security Professional (CCSP) Practice Questions

Question # 41

Which of the following does NOT fall under the "IT" aspect of quality of service (QoS)?

Options:

A.  

Applications

B.  

Key performance indicators (KPIs)

C.  

Services

D.  

Security

Discussion 0
Question # 42

Which of the cloud cross-cutting aspects relates to the requirements placed on the cloud provider by the cloud customer for minimum performance standards and requirements that must be met?

Options:

A.  

Regulatory requirements

B.  

SLAs

C.  

Auditability

D.  

Governance

Discussion 0
Question # 43

Which security concept is based on preventing unauthorized access to data while also ensuring that it is accessible to those authorized to use it?

Options:

A.  

Integrity

B.  

Availability

C.  

Confidentiality

D.  

Nonrepudiation

Discussion 0
Question # 44

At which stage of the BCDR plan creation phase should security be included in discussions?

Options:

A.  

Define scope

B.  

Analyze

C.  

Assess risk

D.  

Gather requirements

Discussion 0
Question # 45

What concept does the "I" represent with the STRIDE threat model?

Options:

A.  

Integrity

B.  

Information disclosure

C.  

IT security

D.  

Insider threat

Discussion 0
Question # 46

Which of the cloud cross-cutting aspects relates to the requirements placed on a system or application by law, policy, or requirements from standards?

Options:

A.  

regulatory requirements

B.  

Auditability

C.  

Service-level agreements

D.  

Governance

Discussion 0
Question # 47

What does dynamic application security testing (DAST) NOT entail?

Options:

A.  

Scanning

B.  

Probing

C.  

Discovery

D.  

Knowledge of the system

Discussion 0
Question # 48

Which of the following is NOT part of a retention policy?

Options:

A.  

Format

B.  

Costs

C.  

Accessibility

D.  

Duration

Discussion 0
Question # 49

Which of the following is NOT a function performed by the handshake protocol of TLS?

Options:

A.  

Key exchange

B.  

Encryption

C.  

Negotiation of connection

D.  

Establish session ID

Discussion 0
Question # 50

Which type of audit report is considered a "restricted use" report for its intended audience?

Options:

A.  

SAS-70

B.  

SSAE-16

C.  

SOC Type 1

D.  

SOC Type 2

Discussion 0

CCSP PDF

CCSP PDF (Printable)
$46.5
$154.99

CCSP Testing Engine

CCSP PDF (Printable)
$51
$169.99

CCSP PDF + Testing Engine

CCSP PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions