Home / ISC / CCSP

ISC CCSP Practice Test - Questions Answers, Page 46

Question list

List of questions

Question 451

(0)

Which kind of SSAE audit reviews controls dealing with the organization's controls for assuring the confidentiality, integrity, and availability of data?

Question 452

(0)

To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:

Question 453

(0)

Which kind of SSAE audit report is most beneficial for a cloud customer, even though it's unlikely the cloud provider will share it?

Question 454

(0)

When reviewing the BIA after a cloud migration, the organization should take into account new factors related to data breach impacts. One of these new factors is:

Question 455

(0)

What is the term we use to describe the general ease and efficiency of moving data from one cloud provider either to another cloud provider or down from the cloud?

Question 456

(0)

Countermeasures for protecting cloud operations against internal threats include all of the following except:

Question 457

(0)

The cloud customer will have the most control of their data and systems, and the cloud provider will have the least amount of responsibility, in which cloud computing arrangement?

Question 458

(0)

Countermeasures for protecting cloud operations against external attackers include all of the following except:

Question 459

(0)

User access to the cloud environment can be administered in all of the following ways except:

Question 460

(0)

Countermeasures for protecting cloud operations against internal threats include all of the following except:

Question 451

Which kind of SSAE audit reviews controls dealing with the organization's controls for assuring the confidentiality, integrity, and availability of data?

SOC 1

SOC 2

SOC 3

SOC 4

Show Answer Comment (0)

Question 452

To address shared monitoring and testing responsibilities in a cloud configuration, the provider might offer all these to the cloud customer except:

Access to audit logs and performance data

DLP solution results

Security control administration

SIM, SEIM. and SEM logs

Show Answer Comment (0)

Question 453

Which kind of SSAE audit report is most beneficial for a cloud customer, even though it's unlikely the cloud provider will share it?

SOC 3

SOC 1 Type 2

SOC 2 Type 2

SOC 1 Type 1 Answer: C The SOC 3 is the least detailed, so the provider is not concerned about revealing it. The SOC 1 Types 1 and 2 are about financial reporting and not relevant.The SOC 2 Type 2 is much more detailed and will most likely be kept closely held by the provider.

Show Answer Comment (0)

Question 454

When reviewing the BIA after a cloud migration, the organization should take into account new factors related to data breach impacts. One of these new factors is:

Many states have data breach notification laws.

Breaches can cause the loss of proprietary data.

Breaches can cause the loss of intellectual property.

Legal liability can't be transferred to the cloud provider.

Show Answer Comment (0)

Question 455

What is the term we use to describe the general ease and efficiency of moving data from one cloud provider either to another cloud provider or down from the cloud?

Obfuscation

Elasticity

Mobility

Portability

Show Answer Comment (0)

Question 456

Countermeasures for protecting cloud operations against internal threats include all of the following except:

Mandatory vacation

Least privilege

Separation of duties

Conflict of interest

Show Answer Comment (0)

Question 457

The cloud customer will have the most control of their data and systems, and the cloud provider will have the least amount of responsibility, in which cloud computing arrangement?

IaaS

SaaS

Community cloud

PaaS

Show Answer Comment (0)