Identity and access management (IAM) is a security discipline that ensures which of the following?

That the right individual gets access to the right resources at the right time for the right reasons.

That all users are properly authorized

That the right individual gets access to the right resources at the right time for the right reasons.

That all users are properly authenticated

That unauthorized users will get access to the right resources at the right time for the right reasons

Maintenance mode requires all of these actions except:

Initiate enhanced security controls

Remove all active production instances

Initiate enhanced security controls

In a federated identity arrangement using a trusted third-party model, who is the identity provider and who is the relying party?

A contracted third party/the various member organizations of the federation

The users of the various organizations within the federations within the federation/a CASB

Each member organization/a trusted third party

Each member organization/each member organization

A contracted third party/the various member organizations of the federation

Database activity monitoring (DAM) can be:

Used in the place of encryption

The baseline should cover which of the following?

As many systems throughout the organization as possible

Data breach alerting and reporting

All regulatory compliance requirements

As many systems throughout the organization as possible

A data custodian is responsible for which of the following?

The safe custody, transport, storage of the data, and implementation of business rules

Which of the following is the least challenging with regard to eDiscovery in the cloud?

Identifying roles such as data owner, controller and processor

Decentralization of data storage

Complexities of International law

What is the Cloud Security Alliance Cloud Controls Matrix (CCM)?

An inventory of cloud service security controls that are arranged into separate security domains

A set of software development life cycle requirements for cloud service providers

An inventory of cloud services security controls that are arranged into a hierarchy of security domains

An inventory of cloud service security controls that are arranged into separate security domains

A set of regulatory requirements for cloud service providers

Which of the following is the best example of a key component of regulated PII?

Items that should be implemented

Which of the following components are part of what a CCSP should review when looking at contracting with a cloud service provider?

Background checks for the provider's personnel

The physical layout of the datacenter

Legal controls refer to which of the following?

Controls designed to comply with laws and regulations related to the cloud environment

Which of the following best describes a cloud carrier?

The intermediary who provides connectivity and transport of cloud providers and cloud consumers

A person or entity responsible for making a cloud service available to consumers

The person or entity responsible for transporting data across the Internet

The person or entity responsible for keeping cloud services running for customers

Gap analysis is performed for what reason?

To begin the benchmarking process

To assure proper accounting practices are being used

To provide assurances to cloud customers

To ensure all controls are in place and working properly

When using a SaaS solution, what is the capability provided to the customer?

To use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a programinterface. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited userspecific application configuration settings.

To use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a programinterface. The consumer does manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.

To use the consumer's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a programinterface. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited userspecific application configuration settings.

To use the consumer's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a programinterface. The consumer does manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.

To use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (for example, web-based email), or a programinterface. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited userspecific application configuration settings.

ISC CCSP Practice Test 13 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

ISC CCSP Practice Test 13

Question

ISC CCSP Practice Tests

Practice Tests