CCSP ISC2 Exam Questions and Free Practice Test

Question 25

- (Exam Topic 3)
Which of the following methods for the safe disposal of electronic records can always be used in a cloud
environment? Response:

A. Physical destruction

B. Encryption

C. Overwriting

D. Degaussing

Correct Answer:B

Question 26

- (Exam Topic 2)
The Cloud Security Alliance (CSA) Security, Trust, and Assurance Registry (STAR) program has ______ tiers.
Response:

A. Two

B. Three

C. Four

D. Eight

Correct Answer:B

Question 27

- (Exam Topic 1)
A honeypot should contain data______.
Response:

A. Raw

B. Production

C. Useless

D. Sensitive

Correct Answer:C

Question 28

- (Exam Topic 2)
You are the IT director for a small contracting firm. Your company is considering migrating to a cloud production environment.
Which service model would best fit your needs if you wanted an option that reduced the chance of vendor lock-in but also did not require the highest degree of administration by your own personnel?
Response:

A. IaaS

B. PaaS

C. SaaS

D. TanstaafL

Correct Answer:B

Question 29

- (Exam Topic 1)
DAST checks software functionality in ______.
Response:

A. The production environment

B. A runtime state

C. The cloud

D. An IaaS configuration

Correct Answer:B

Question 30

- (Exam Topic 2)
Which type of testing tends to produce the best and most comprehensive results for discovering system vulnerabilities?
Response:

A. Static

B. Dynamic

C. Pen

D. Vulnerability

Correct Answer:A

START CCSP EXAM