Exam CCSP: Certified Cloud Security Professional, exam CCSP study materials and exam dumps
Become a CCSP – Certified Cloud Security Professional
Earning the globally recognized CCSP cloud security certification is a proven way to build your career and better secure critical assets in the cloud.
The CCSP shows you have the advanced technical skills and knowledge to design, manage and secure data, applications and infrastructure in the cloud using best practices, policies and procedures established by the cybersecurity experts at (ISC)².
Prove your skills, advance your career, and gain support from a community of cybersecurity leaders here to help you throughout your professional journey.
Who Earns The CCSP?
The CCSP is ideal for IT and information security leaders responsible for applying best practices to cloud security architecture, design, operations and service orchestration, including those in the following positions:
Enterprise Architect
Security Administrator
Systems Engineer
Security Architect
Security Consultant
Security Engineer
Security Manager
Systems Architect
Is The CCSP Right For You?
The CCSP isn’t the best IT certification option for everyone. Before you start down your certification path, make sure you aren’t missing an opportunity to pursue a credential more aligned with your immediate career goals.
Free demo for reference:
NEW QUESTION: 1
Which of the following storage types are used with an Infrastructure as a Service (IaaS)
solution?
Response:
A. Volume and block
B. Structured and object
C. Volume and object
D. Unstructured and ephemeral
Answer: C
NEW QUESTION: 2
Which of the following is not a security concern related to archiving data for long-term
storage?
Response:
A. Media the data resides on
B. Underground depth of the storage facility
C. Long-term storage of the related cryptographic keys
D. Format of the data
Answer: B
NEW QUESTION: 3
In general, a cloud BCDR solution will be _________ than a physical solution.
Response:
A. More difficult to engineer
B. Slower
C. Less expensive
D. Larger
Answer: C
NEW QUESTION: 4
Digital rights management (DRM) solutions (sometimes referred to as information rights
management, or IRM) often protect unauthorized distribution of what type of intellectual property?
Response:
A. Copyright
B. Trademarks
C. Personally identifiable information (PII)
D. Patents
Answer: A
NEW QUESTION: 5
TLS uses ___________ to authenticate a connection and create a shared secret for the
duration of the session.
A. X.509 certificates
B. 802.11X
C. SAML 2.0
D. The Diffie-Hellman process
Answer: A
NEW QUESTION: 6
When a data center is configured such that the backs of the devices face each other and the
ambient temperature in the work area is cool, it is called ___________.
Response:
A. Hot aisle containment
B. Thermo-optimized
C. HVAC modulated
D. Cold aisle containment
Answer: A
NEW QUESTION: 7
All of the following methods can be used to attenuate the harm caused by escalation of
privilege except:
Response:
A. The use of automated analysis tools such as SIM, SIEM, and SEM solutions
B. Extensive access control and authentication tools and techniques
C. Analysis and review of all log data by trained, skilled personnel on a frequent basis
D. Periodic and effective use of cryptographic sanitization tools
Answer: D
NEW QUESTION: 8
SOX was enacted because of which of the following?
Response:
A. Poor BOD oversight
B. Poor financial controls
C. All of the above
D. Lack of independent audits
Answer: C
NEW QUESTION: 9
Security best practices in a virtualized network environment would include which of the
following?
Response:
A. Running iSCSI traffic unencrypted in order to have it observed and monitored by NIDS
B. Using distinct ports and port groups for various VLANs on a virtual switch rather than running
them through the same port
C. Adding HIDS to all virtual guests
D. Hardening all outward-facing firewalls in order to make them resistant to attack
Answer: B
NEW QUESTION: 10
Proper ________ need to be assigned to each data classification/category.
Response:
A. Metadata
B. Dollar values
C. Policies
D. Security controls
Answer: D
NEW QUESTION: 11
What can tokenization be used for?
Response:
A. Giving management oversight to e-commerce functions
B. Encryption
C. Compliance with PCI DSS
D. Enhancing the user experience
Answer: C
NEW QUESTION: 12
You are the security manager of a small firm that has just purchased a DLP solution to
implement in your cloud-based production environment.
In order to get truly holistic coverage of your environment, you should be sure to include
__________ as a step in the deployment process.
Response:
A. Getting signed user agreements from all users
B. All of your customers to install the tool
C. Adoption of the tool in all routers between your users and the cloud provider
D. Installation of the solution on all assets in the cloud data center
Answer: A
NEW QUESTION: 13
Which of the following would probably best aid an organization in deciding whether to
migrate from a legacy environment to a particular cloud provider?
Response:
A. SLA satisfaction surveys from other (current and past) cloud customers
B. The cost/benefit measure of closing the organization's relocation site (hot site/warm site) and
using the cloud for disaster recovery instead
C. Cloud provider offers to provide engineering assistance during the migration
D. Rate sheets comparing a cloud provider to other cloud providers
Answer: A
NEW QUESTION: 14
All of the following are terms used to described the practice of obscuring original raw data so
that only a portion is displayed for operational purposes, except:
Response:
A. Masking
B. Tokenization
C. Obfuscation
D. Data discovery
Answer: D
NEW QUESTION: 15
You are a consultant performing an external security review on a large manufacturing firm.
You determine that its newest assembly plant, which cost $24 million, could be completely destroyed
by a fire but that a fire suppression system could effectively protect the plant.
The fire suppression system costs $15 million. An insurance policy that would cover the full
replacement cost of the plant costs $1 million per month.
In order to establish the true annualized loss expectancy (ALE), you would need all of the following
information except ____________.
Response:
A. The amount of revenue generated by the plant
B. The length of time it would take to rebuild the plant
C. The rate at which the plant generates revenue
D. The amount of product the plant creates
Answer: D
NEW QUESTION: 16
Cloud environments pose many unique challenges for a data custodian to properly adhere to
policies and the use of data. What poses the biggest challenge for a data custodian with a PaaS
implementation, over and above the same concerns with IaaS?
Response:
A. Knowledge of systems
B. Data classification rules
C. Access to systems
D. Contractual requirements
Answer: A
NEW QUESTION: 17
Bob is staging an attack against Alice's website. He is able to embed a link on her site that will
execute malicious code on a visitor's machine, if the visitor clicks on the link. This is an example of
which type of attack?
Response:
A. Insecure cryptographic storage
B. Cross-site scripting
C. Broken authentication/session management
D. Security misconfiguration
Answer: B
If you are interested in CCSP training materials you can find them:
