Certified Cloud Security Professional CCSP Exam Questions & Answers

All 32 questions

1. Q1 When establishing a baseline, what should you do immediately after a fresh operating system install?
2. Q2 Which of the following is not a focus or consideration of an internal audit?
3. Q3 Which of the following is the optimal humidity level for a data center, per the guidelines established by the America Society of…
4. Q4 Which of the following is not one of five principles of SOC Type 2 audits?
5. Q5 Which of the following publishes the most commonly used standard for data center design in regard to tiers and topologies?
6. Q6 What changes are necessary to application code in order to implement DNSSEC?
7. Q7 Which of the following does not relate to the hiding of sensitive data from data sets?
8. Q8 Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?
9. Q9 Your organization needs to conform to the highest levels of FIPS-140 cryptographic standards in order to meet contractual obligations. Your manager has…
10. Q10 Which of the following service capabilities gives the cloud customer the most control over resources and configurations?
11. Q11 What is the official term for the process of determining audit results that deviate from intended configurations and policies?
12. Q12 Which of the cloud cross-cutting aspects relates to the ability to easily move services and applications between different cloud providers?
13. Q13 The European Union passed the first major regulation declaring data privacy to be a human right. In what year did it go…
14. Q14 Which of the following defines what systems and applications are included with an audit?
15. Q15 Which of the following concepts is a primary determinant in regard to the storage costs incurred by a cloud customer?
16. Q16 Which value refers to the amount of data an organization would need to recover in the event of a BCDR situation in…
17. Q17 Which type of cloud model typically presents the most challenges to a cloud provider during the Destroy phase of the cloud data…
18. Q18 Which of the cloud cross-cutting aspects relates to the assigning of jobs, tasks, and roles, as well as to ensuring they are…
19. Q19 Which of the following technologies is used to monitor network traffic and block any potential threats or attacks that match defined signatures…
20. Q20 Which concept BEST describes the capability for a cloud environment to automatically scale a system or application based on its current resource…
21. Q21 Which ITIL component is focused on maintaining detailed information about all components and services within an organization?
22. Q22 Which of the cloud deployment models offers the easiest initial setup and access for the cloud customer?
23. Q23 What does static application security testing offer as a tool to testers?
24. Q24 With software-defined networking, what aspect of networking is abstracted from the forwarding of traffic?
25. Q25 What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for…
26. Q26 Which aspect of cloud computing makes it very difficult to perform repeat audits over time to track changes and compliance?
27. Q27 Which of the following is not a component covered by the GDPR?
28. Q28 Which ITIL component is focused on ensuring that services are properly provisioned and secured to meet requirements?
29. Q29 When packet capture is being performed in a cloud environment, what is the main challenge facing the cloud customer?
30. Q30 What must be secured on physical hardware to prevent unauthorized access to systems?
31. Q31 What is used for local, physical access to hardware within a data center?
32. Q32 Which of the following is not an example of “something the user has” for a multifactor authentication system?