Certified Cloud Security Professional (CCSP) Free Practice Test

Question 1

Administrative penalties for violating the General Data Protection Regulation (GDPR) can range up to ____________.

A. US$100,000

B. 1,000,000 euros

C. 20,000,000 euros

D. 500,000 euros

Correct Answer: C

Question 2

Which of the following best describes the Organizational Normative Framework (ONF)?

A. A container for components of an application's security, best practices catalogued and leveraged by the organization

B. A framework of containers for some of the components of application security, best practices, catalogued and leveraged by the organization

C. A set of application security, and best practices, catalogued and leveraged by the organization

D. A framework of containers for all components of application security, best practices, catalogued and leveraged by the organization.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which type of threat is often used in conjunction with phishing attempts and is often viewed as greatly increasing the likeliness of success?

A. Cross-site scripting

B. Cross-site request forgery

C. Unvalidated redirects and forwards

D. Insecure direct object references

Correct Answer: C

Question 4

Which component of ITIL involves handling anything that can impact services for either internal or public users?

A. Change management

B. Deployment management

C. Incident management

D. Problem management

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which of the following is NOT a commonly used communications method within cloud environments to secure data in transit?

A. HTTPS

B. DNSSEC

C. VPN

D. IPSec

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which of the following storage types is most closely associated with a traditional file system and tree structure?

A. Unstructured

B. Volume

C. Object

D. Structured

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which of the following service capabilities gives the cloud customer the least amount of control over configurations and deployments?

A. Infrastructure

B. Platform

C. Desktop

D. Software

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which of the following is NOT part of a retention policy?

A. Duration

B. Accessibility

C. Format

D. Costs

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

A virtual network interface card (NIC) exists at layer __________ of the OSI model.

A. 4

B. 8

C. 6

D. 2

Correct Answer: D

Question 10

On large distributed systems with pooled resources, cloud computing relies on extensive orchestration to maintain the environment and the constant provisioning of resources.
Which of the following is crucial to the orchestration and automation of networking resources within a cloud?

A. DNSSEC

B. DNS

C. DHCP

D. DCOM

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

Which of the following is not typically included as a basic phase of the software development life cycle?

A. Define

B. Design

C. Develop

D. Describe

Correct Answer: D

Question 12

Which cloud service category most commonly uses client-side key management systems?

A. Platform as a Service

B. Software as a Service

C. Desktop as a Service

D. Infrastructure as a Service

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 13

Which of the following roles would be responsible for managing memberships in federations and the use and integration of federated services?

A. Inter-cloud provider

B. Cloud service business manager

C. Cloud service administrator

D. Cloud service integrator

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 14

Which of the following is not one of the defined security controls domains within the Cloud Controls Matrix, published by the Cloud Security Alliance?

A. Human resources

B. Mobile security

C. Identity and access management

D. Financial

Correct Answer: D

Welcome to TestSimulate

ISC Certified Cloud Security Professional (CCSP) Free Practice Test