Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Certified Cloud Security Professional (CCSP) Practice Questions

Question # 1

Because cloud providers will not give detailed information out about their infrastructures and practices to the general public, they will often use established auditing reports to ensure public trust, where the reputation of the auditors serves for assurance.

Which type of audit reports can be used for general public trust assurances?

Options:

A.  

SOC 2

B.  

SAS-70

C.  

SOC 3

D.  

SOC 1

Discussion 0
Question # 2

What masking strategy involves the replacing of sensitive data at the time it is accessed and used as it flows between the data and application layers of a service?

Options:

A.  

Active

B.  

Static

C.  

Dynamic

D.  

Transactional

Discussion 0
Question # 3

Which of the following best describes a cloud carrier?

Options:

A.  

The intermediary who provides connectivity and transport of cloud providers and cloud consumers

B.  

A person or entity responsible for making a cloud service available to consumers

C.  

The person or entity responsible for transporting data across the Internet

D.  

The person or entity responsible for keeping cloud services running for customers

Discussion 0
Question # 4

When data discovery is undertaken, three main approaches or strategies are commonly used to determine what the type of data, its format, and composition are for the purposes of classification.

Which of the following is NOT one of the three main approaches to data discovery?

Options:

A.  

Content analysis

B.  

Hashing

C.  

Labels

D.  

Metadata

Discussion 0
Question # 5

In attempting to provide a layered defense, the security practitioner should convince senior management to include security controls of which type?

Options:

A.  

Physical

B.  

All of the above

C.  

technological

D.  

Administrative

Discussion 0
Question # 6

Gap analysis is performed for what reason?

Options:

A.  

To begin the benchmarking process

B.  

To assure proper accounting practices are being used

C.  

To provide assurances to cloud customers

D.  

To ensure all controls are in place and working properly

Discussion 0
Question # 7

As part of the auditing process, getting a report on the deviations between intended configurations and actual policy is often crucial for an organization.

What term pertains to the process of generating such a report?

Options:

A.  

Deficiencies

B.  

Findings

C.  

Gap analysis

D.  

Errors

Discussion 0
Question # 8

Whereas a contract articulates overall priorities and requirements for a business relationship, which artifact enumerates specific compliance requirements, metrics, and response times?

Options:

A.  

Service level agreement

B.  

Service level contract

C.  

Service compliance contract

D.  

Service level amendment

Discussion 0
Question # 9

In addition to whatever audit results the provider shares with the customer, what other mechanism does the customer have to ensure trust in the provider’s performance and duties?

Options:

A.  

HIPAA

B.  

The contract

C.  

Statutes

D.  

Security control matrix

Discussion 0
Question # 10

Identity and access management (IAM) is a security discipline that ensures which of the following?

Options:

A.  

That all users are properly authorized

B.  

That the right individual gets access to the right resources at the right time for the right reasons.

C.  

That all users are properly authenticated

D.  

That unauthorized users will get access to the right resources at the right time for the right reasons

Discussion 0

CCSP PDF

CCSP PDF (Printable)
$46.5
$154.99

CCSP Testing Engine

CCSP PDF (Printable)
$51
$169.99

CCSP PDF + Testing Engine

CCSP PDF (Printable)
$63.9
$212.99
Exams4sure Dumps

Exam style questions across every CCSP domain

Last Update 2 days ago
Total Questions : 512

Start with our free CCSP practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real Cloud Security exam. Each CCSP exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your ISC weak domains, see where you're losing marks, and build a focused study plan in minutes.

Free Exams Sample Questions