CCSP ISC2 Exam Questions and Free Practice Test

Question 13

- (Exam Topic 3)
Which kind of SSAE report comes with a seal of approval from a certified auditor? Response:

A. SOC 1

B. SOC 2

C. SOC 3

D. SOC 4

Correct Answer:C

Question 14

- (Exam Topic 2)
In a cloud environment, encryption should be used for all the following, except: Response:

A. Long-term storage of data

B. Near-term storage of virtualized images

C. Secure sessions/VPN

D. Profile formatting

Correct Answer:D

Question 15

- (Exam Topic 1)
You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment.
What should you not expect the tool to address? Response:

A. Sensitive data sent inadvertently in user emails

B. Sensitive data captured by screen shots

C. Sensitive data moved to external devices

D. Sensitive data in the contents of files sent via FTP

Correct Answer:B

Question 16

- (Exam Topic 3)
Cloud vendors are held to contractual obligations with specified metrics by:
Response:

A. SLAs

B. Regulations

C. Law

D. Discipline

Correct Answer:A

Question 17

- (Exam Topic 3)
There are two reasons to conduct a test of the organization’s recovery from backup in an environment other
than the primary production environment. Which of the following is one of them? Response:

A. It is good to invest in more than one community.

B. You want to approximate contingency conditions, which includes not operating in the primary location.

C. It is good for your personnel to see other places occasionally.

D. Your regulators won’t follow you offsite, so you’ll be unobserved during your test.

Correct Answer:B

Question 18

- (Exam Topic 2)
What is the risk to the organization posed by dashboards that display data discovery results? Response:

A. Increased chance of external penetration

B. Flawed management decisions based on massaged displays

C. Higher likelihood of inadvertent disclosure

D. Raised incidence of physical theft

Correct Answer:B

START CCSP EXAM