[Full-Version] 2024 New CCSP Actual Exam Dumps, ISC Practice Test
Study HIGH Quality CCSP Free Study Guides and Exams Tutorials
NEW QUESTION # 315
Which of the following would NOT be considered part of resource pooling with an Infrastructure as a Service implementation?
- A. Mamory
- B. Storage
- C. Application
- D. CPU
Answer: C
Explanation:
Infrastructure as a Service pools the compute resources for platforms and applications to build upon, including CPU, memory, and storage. Applications are not part of an IaaS offering from the cloud provider.
NEW QUESTION # 316
A data custodian is responsible for which of the following?
- A. Data context
- B. The safe custody, transport, storage of the data, and implementation of business rules
- C. Data content
- D. Logging access and alerts
Answer: B
Explanation:
Explanation
A data custodian is responsible for the safe custody, transport, and storage of data, and the implementation of business roles.
NEW QUESTION # 317
When a data center is configured such that the backs of the devices face each other and the ambient temperature in the work area is cool, it is called ___________.
- A. HVAC modulated
- B. Thermo-optimized
- C. Cold aisle containment
- D. Hot aisle containment
Answer: D
NEW QUESTION # 318
Because of multitenancy, specific risks in the public cloud that don't exist in the other cloud service models include all the following except:
- A. Information bleed
- B. Risk of loss/disclosure due to legal seizures
- C. DoS/DDoS
- D. Escalation of privilege
Answer: C
Explanation:
DoS/DDoS threats and risks are not unique to the public cloud model.
NEW QUESTION # 319
You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment.
In order to get truly holistic coverage of your environment, you should be sure to include __________ as a step in the deployment process.
Response:
- A. Getting signed user agreements from all users
- B. Installation of the solution on all assets in the cloud data center
- C. All of your customers to install the tool
- D. Adoption of the tool in all routers between your users and the cloud provider
Answer: A
NEW QUESTION # 320
FM-200 has all the following properties except ___________.
Response:
- A. It may deplete the Earth's ozone layer
- B. It does not leave a film or coagulant after use
- C. It's nontoxic at levels used for fire suppression
- D. It's gaseous at room temperature
Answer: A
NEW QUESTION # 321
The GAPP framework was developed through a joint effort between the major Canadian and American professional accounting associations in order to assist their members with managing and preventing risks to the privacy of their data and customers.
Which of the following is the meaning of GAPP?
- A. General accounting personal privacy
- B. Generally accepted privacy principles
- C. Generally accepted privacy practices
- D. General accounting privacy policies
Answer: B
NEW QUESTION # 322
Which of the following service capabilities gives the cloud customer an established and maintained framework to deploy code and applications?
- A. Platform
- B. Software
- C. Desktop
- D. Infrastructure
Answer: A
Explanation:
The platform service capability provides programming languages and libraries from the cloud provider, where the customer can deploy their own code and applications into a managed and controlled framework.
NEW QUESTION # 323
Which of the following types of data would fall under data rights management (DRM) rather than information rights management (IRM)?
- A. Security profiles
- B. Personnel data
- C. Publications
- D. Financial records
Answer: C
Explanation:
Whereas IRM is used to protect a broad range of data, DRM is focused specifically on the protection of consumer media, such as publications, music, movies, and so on. IRM is used to protect general institution data, so financial records, personnel data, and security profiles would all fall under the auspices of IRM.
NEW QUESTION # 324
The Transport Layer Security (TLS) protocol creates a secure communications channel over public media (such as the Internet). In a typical TLS session, who initiates the protocol?
Response:
- A. The ISP
- B. The server
- C. The certifying authority
- D. The client
Answer: D
NEW QUESTION # 325
Which of the following roles is responsible for overseeing customer relationships and the processing of financial transactions?
- A. Cloud service operations manager
- B. Cloud service business manager
- C. Cloud service manager
- D. Cloud service deployment
Answer: B
Explanation:
Explanation
The cloud service business manager is responsible for overseeing business plans and customer relationships as well as processing financial transactions.
NEW QUESTION # 326
What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?
- A. Bastion
- B. Proxy
- C. WAF
- D. Honeypot
Answer: A
Explanation:
A bastion host is a server that is fully exposed to the public Internet, but is extremely hardened to prevent attacks and is usually dedicated for a specific application or usage; it is not something that will serve multiple purposes. This singular focus allows for much more stringent security hardening and monitoring.
NEW QUESTION # 327
Which of the following is NOT a major regulatory framework?
- A. HIPAA
- B. FIPS 140-2
- C. SOX
- D. PCI DSS
Answer: B
Explanation:
FIPS 140-2 is a United States certification standard for cryptographic modules, and it provides guidance and requirements for their use based on the requirements of the data classification. However, these are not actual regulatory requirements. The Health Insurance Portability and Accountability Act (HIPAA), Sarbanes-Oxley Act (SOX), and the Payment Card Industry Data Security Standard (PCI DSS) are all major regulatory frameworks either by law or specific to an industry.
NEW QUESTION # 328
Which of the following characteristics is associated with digital rights management (DRM) solutions (sometimes referred to as information rights management, or IRM)?
Response:
- A. Resistance
- B. Influence
- C. Trepidation
- D. Persistence
Answer: D
NEW QUESTION # 329
What is one of the reasons a baseline might be changed?
- A. Natural disaster
- B. Numerous change requests
- C. To reduce redundancy
- D. Power fluctuation
Answer: B
Explanation:
Explanation/Reference:
Explanation:
If the CMB is receiving numerous change requests to the point where the amount of requests would drop by modifying the baseline, then that is a good reason to change the baseline. None of the other reasons should involve the baseline at all.
NEW QUESTION # 330
Which technology is NOT commonly used for security with data in transit?
- A. DNSSEC
- B. VPN
- C. HTTPS
- D. IPsec
Answer: A
Explanation:
Explanation/Reference:
Explanation:
DNSSEC relates to the integrity of DNS resolutions and the prevention of spoofing or redirection, and does not pertain to the actual security of transmissions or the protection of data.
NEW QUESTION # 331
......
Get 100% Real Free ISC Cloud Security CCSP Sample Questions: https://www.prep4pass.com/CCSP_exam-braindumps.html
Download ISC CCSP Exam Dumps to Pass Exam Easily: https://drive.google.com/open?id=1-855rNBu8WTAgMqTg2_IkJjyz37Axld2
