CCSP ISC2 Exam Questions and Free Practice Test

Question 43

- (Exam Topic 2)
You are the IT security manager for a video game software development company. Which of the following is most likely to be your primary concern on a daily basis?
Response:

A. Health and human safety

B. Security flaws in your products

C. Security flaws in your organization

D. Regulatory compliance

Correct Answer:C

Question 44

- (Exam Topic 3)
Typically, SSDs are ______.
Response:

A. More expensive than spinning platters

B. Larger than tape backup

C. Heavier than tape libraries

D. More subject to malware than legacy drives

Correct Answer:A

Question 45

- (Exam Topic 1)
At which phase of the SDLC process should security begin participating?

A. Requirements gathering

B. Requirements analysis

C. Design

D. Testing

Correct Answer:A

Question 46

- (Exam Topic 1)
When an organization implements an SIEM solution and begins aggregating event data, the configured event sources are only valid at the time it was configured. Application modifications, patching, and other upgrades will change the events generated and how they are represented over time.
What process is necessary to ensure events are collected and processed with this in mind?

A. Continual review

B. Continuous optimization

C. Aggregation updates

D. Event elasticity

Correct Answer:B

Question 47

- (Exam Topic 1)
Which of the following best describes a cloud carrier?

A. A person or entity responsible for making a cloud service available to consumers

B. The intermediary who provides connectivity and transport of cloud services between cloud providers and cloud consumers

C. The person or entity responsible for keeping cloud services running for customers

D. The person or entity responsible for transporting data across the Internet

Correct Answer:B

Question 48

- (Exam Topic 1)
What is the primary security mechanism used to protect SOAP and REST APIs? Response:

A. Firewalls

B. XML firewalls

C. Encryption

D. WAFs

Correct Answer:C

START CCSP EXAM