ISC2 - CCSP Study Guide Exam Questions and
Answers.
Which aspect of cloud computing will be most negatively impacted by vendor lock-in?
Elasticity
Reversibility
Interoperability
Portability - > Portability
Which of the following APIs are most commonly used within a cloud environment?
REST and SAML
SOAP and REST
REST and XML
XML and SAML - > SOAP and REST
Which of the following attempts to establish an international standard for eDiscovery
processes and best practices?
ISO/IEC 31000
ISO/IEC 27050
ISO/IEC 19888
ISO/IEC 27001 - > ISO/IEC 27050
Which of the following roles is responsible for obtaining new customers and securing
contracts and agreements?
Inter-cloud provider
Cloud service broker
Cloud auditor
Cloud service developer - > Cloud service broker
,Which term relates to the application of scientific methods and practices to evidence?
Forensics
Methodical
Theoretical
Measured - > Forensics
Which of the following roles involves the provisioning and delivery of cloud services?
Cloud service deployment manager
Cloud service business manager
Cloud service manager
Cloud service operations manager - > Cloud service manager
What is the primary reason that makes resolving jurisdictional conflicts complicated?
Different technology standards
Costs
Language barriers
Lack of international authority - > Lack of international authority
GAAPs are created and maintained by which organization?
ISO/IEC
AICPA
PCI Council
ISO - > AICPA
Which of the following roles is responsible for preparing systems for the cloud,
administering and monitoring services, and managing inventory and assets?
Cloud service business manager
Cloud service deployment manager
Cloud service operations manager
Cloud service manager - > Cloud service operations manager
,Which protocol allows a system to use block-level storage as if it was a SAN, but over
TCP network traffic instead?
SATA
iSCSI
TLS
SCSI - > iSCSI
Which of the cloud deployment models is used by popular services such as iCloud,
Dropbox, and OneDrive?
Hybrid
Public
Private
Community - > Public
Why does a Type 2 hypervisor typically offer less security control than a Type 1
hypervisor?
-A Type 2 hypervisor runs on top of another operating system and is dependent on the
security of the OS for its own security.
-A Type 2 hypervisor allows users to directly perform some functions with their own
access.
-A Type 2 hypervisor is open source, so attackers can more easily find exploitable
vulnerabilities with that access.
-A Type 2 hypervisor is always exposed to the public Internet for federated identity
access. - > A Type 2 hypervisor runs on top of another operating system and is
dependent on the security of the OS for its own security.
Which is the appropriate phase of the cloud data lifecycle for determining the data's
classification?
Create
Use
Share
Store - > Create
, Which of the following is the optimal temperature for a data center, per the guidelines
established by the America Society of Heating, Refrigeration, and AirConditioning
Engineers (ASHRAE)?
69.8-86.0degF (21-30degC)
64.4-80.6degF(18-27degC)
51.8-66.2degF(11-19degC)
44.6-60-8degF(7-16degC) - > 64.4-80.6degF(18-27degC)
Which of the following is not a risk management framework?
COBIT
Hex GBL
ISO 31000:2009
NIST SP 800-37 - > Hex GBL
Which of the following roles is responsible for creating cloud components and the testing
and validation of services?
Cloud auditor
Inter-cloud provider
Cloud service broker
Cloud service developer - > Cloud service developer
What is the best source for information about securing a physical asset's BIOS?
Security policies
Manual pages
Vendor documentation
Regulations - > Vendor documentation
What is the only data format permitted with the SOAP API?
HTML
Answers.
Which aspect of cloud computing will be most negatively impacted by vendor lock-in?
Elasticity
Reversibility
Interoperability
Portability - > Portability
Which of the following APIs are most commonly used within a cloud environment?
REST and SAML
SOAP and REST
REST and XML
XML and SAML - > SOAP and REST
Which of the following attempts to establish an international standard for eDiscovery
processes and best practices?
ISO/IEC 31000
ISO/IEC 27050
ISO/IEC 19888
ISO/IEC 27001 - > ISO/IEC 27050
Which of the following roles is responsible for obtaining new customers and securing
contracts and agreements?
Inter-cloud provider
Cloud service broker
Cloud auditor
Cloud service developer - > Cloud service broker
,Which term relates to the application of scientific methods and practices to evidence?
Forensics
Methodical
Theoretical
Measured - > Forensics
Which of the following roles involves the provisioning and delivery of cloud services?
Cloud service deployment manager
Cloud service business manager
Cloud service manager
Cloud service operations manager - > Cloud service manager
What is the primary reason that makes resolving jurisdictional conflicts complicated?
Different technology standards
Costs
Language barriers
Lack of international authority - > Lack of international authority
GAAPs are created and maintained by which organization?
ISO/IEC
AICPA
PCI Council
ISO - > AICPA
Which of the following roles is responsible for preparing systems for the cloud,
administering and monitoring services, and managing inventory and assets?
Cloud service business manager
Cloud service deployment manager
Cloud service operations manager
Cloud service manager - > Cloud service operations manager
,Which protocol allows a system to use block-level storage as if it was a SAN, but over
TCP network traffic instead?
SATA
iSCSI
TLS
SCSI - > iSCSI
Which of the cloud deployment models is used by popular services such as iCloud,
Dropbox, and OneDrive?
Hybrid
Public
Private
Community - > Public
Why does a Type 2 hypervisor typically offer less security control than a Type 1
hypervisor?
-A Type 2 hypervisor runs on top of another operating system and is dependent on the
security of the OS for its own security.
-A Type 2 hypervisor allows users to directly perform some functions with their own
access.
-A Type 2 hypervisor is open source, so attackers can more easily find exploitable
vulnerabilities with that access.
-A Type 2 hypervisor is always exposed to the public Internet for federated identity
access. - > A Type 2 hypervisor runs on top of another operating system and is
dependent on the security of the OS for its own security.
Which is the appropriate phase of the cloud data lifecycle for determining the data's
classification?
Create
Use
Share
Store - > Create
, Which of the following is the optimal temperature for a data center, per the guidelines
established by the America Society of Heating, Refrigeration, and AirConditioning
Engineers (ASHRAE)?
69.8-86.0degF (21-30degC)
64.4-80.6degF(18-27degC)
51.8-66.2degF(11-19degC)
44.6-60-8degF(7-16degC) - > 64.4-80.6degF(18-27degC)
Which of the following is not a risk management framework?
COBIT
Hex GBL
ISO 31000:2009
NIST SP 800-37 - > Hex GBL
Which of the following roles is responsible for creating cloud components and the testing
and validation of services?
Cloud auditor
Inter-cloud provider
Cloud service broker
Cloud service developer - > Cloud service developer
What is the best source for information about securing a physical asset's BIOS?
Security policies
Manual pages
Vendor documentation
Regulations - > Vendor documentation
What is the only data format permitted with the SOAP API?
HTML
