ISC2 CCSP Dumps Questions 2021

NEW QUESTION 1
Which Common Criteria Evaluation Assurance Level (EAL) is granted to those products that are formally verified in terms of design and tested by an independent third party?

• A. 1
• B. 3
• C. 5
• D. 7

Answer: D

NEW QUESTION 2
Which of the following would NOT be used to determine the classification of data?
Response:

• A. Metadata
• B. PII
• C. Creator
• D. Future use

Answer: D

NEW QUESTION 3
The destruction of a cloud customer’s data can be required by all of the following except ______.
Response:

• A. Statute
• B. Regulation
• C. The cloud provider’s policy
• D. Contract

Answer: C

NEW QUESTION 4
You are the security manager for an online retail sales company with 100 employees and a production environment hosted in a PaaS model with a major cloud provider.
Your company policies have allowed for a BYOD workforce that work equally from the company offices and their own homes or other locations. The policies also allow users to select which APIs they install and use on their own devices in order to access and manipulate company data.
Of the following, what is a security control you’d like to implement to offset the risk(s) incurred by this practice?

• A. Regular and widespread integrity checks on sampled data throughout the managed environment
• B. More extensive and granular background checks on all employees, particularly new hires
• C. Inclusion of references to all applicable regulations in the policy documents
• D. Increased enforcement of separation of duties for all workflows

Answer: A

NEW QUESTION 5
Which of the following data-sanitation approaches are always available within a cloud environment? Response:

• A. Physical destruction
• B. Shredding
• C. Overwriting
• D. Cryptographic erasure

Answer: D

NEW QUESTION 6
A denial of service (DoS) attack can potentially impact all customers within a cloud environment with the continued allocation of additional resources. Which of the following can be useful for a customer to protect themselves from a DoS attack against another customer?
Response:

• A. Limits
• B. Reservations
• C. Shares
• D. Borrows

Answer: B

NEW QUESTION 7
When a data center is configured such that the backs of the devices face each other and the ambient temperature in the work area is cool, it is called ______.
Response:

• A. Hot aisle containment
• B. Cold aisle containment
• C. Thermo-optimized
• D. HVAC modulated

Answer: A

NEW QUESTION 8
You work for a government research facility. Your organization often shares data with other government research organizations.
You would like to create a single sign-on experience across the organizations, where users at each organization can sign in with the user ID/authentication issued by that organization, then access research data in all the other organizations.
Instead of replicating the data stores of each organization at every other organization (which is one way of accomplishing this goal), you instead want every user to have access to each organization’s specific storage resources.
In order to pass the user IDs and authenticating credentials of each user among the organizations, what
protocol/language/motif will you most likely utilize? Response:

• A. Representational State Transfer (REST)
• B. Security Assertion Markup Language (SAML)
• C. Simple Object Access Protocol (SOAP)
• D. Hypertext Markup Language (HTML)

Answer: B

NEW QUESTION 9
Which of the following in a federated environment is responsible for consuming authentication tokens? Response:

• A. Relying party
• B. Identity provider
• C. Cloud services broker
• D. Authentication provider

Answer: A

NEW QUESTION 10
Which of the following aspects of the BC/DR process poses a risk to the organization? Response:

• A. Threat intelligence gathering
• B. Preplacement of response assets
• C. Budgeting for disaster
• D. Full testing of the plan

Answer: D

NEW QUESTION 11
Your company maintains an on-premises data center for daily production activities but wants to use a cloud service to augment this capability during times of increased demand (cloud bursting).
Which deployment model would probably best suit the company’s needs? Response:

• A. Public
• B. Private
• C. Community
• D. Hybrid

Answer: D

NEW QUESTION 12
DLP solutions can aid all of the following security-related efforts except ______.
Response:

• A. Access control
• B. Egress monitoring
• C. e-discovery/forensics
• D. Data categorization/classification

Answer: A

NEW QUESTION 13
Which of the following is a possible negative aspect of bit-splitting? Response:

• A. It may require trust in additional third parties beyond the primary cloud service provider.
• B. There may be cause for management concern that the technology will violate internal policy.
• C. Users will have far greater difficulty understanding the implementation.
• D. Limited vendors make acquisition and support challenging.

Answer: A

NEW QUESTION 14
FM-200 has all the following properties except ______.
Response:

• A. It’s nontoxic at levels used for fire suppression
• B. It’s gaseous at room temperature
• C. It may deplete the Earth’s ozone layer
• D. It does not leave a film or coagulant after use

Answer: C

NEW QUESTION 15
Which type of report is considered for “general” use and does not contain any sensitive information? Response:

• A. SOC 1
• B. SAS-70
• C. SOC 3
• D. SOC 2

Answer: C

NEW QUESTION 16
You are the security manager for a software development firm. Your company is interested in using a managed cloud service provider for hosting its testing environment. Previous releases have shipped with major flaws that were not detected in the testing phase; leadership wants to avoid repeating that problem.
What tool/technique/technology might you suggest to aid in identifying programming errors?

• A. Vulnerability scans
• B. Open source review
• C. SOC audits
• D. Regulatory review

Answer: B

NEW QUESTION 17
Which of the following are considered to be the building blocks of cloud computing? Response:

• A. Data, access control, virtualization, and services
• B. Storage, networking, printing and virtualization
• C. CPU, RAM, storage and networking
• D. Data, CPU, RAM, and access control

Answer: C