ISC-CCSP

CCSP Within a SaaS environment, what is the responsibility on the part of the cloud customer in regard to procuring the software used?

CCSP Implementing baselines on systems would take an enormous amount of time and resources if the staff had to apply them to each server, and over time, it would be almost impossible to keep all the systems in sync on an ongoing basis.Which of the following is NOT a package that can be used for implementing and maintaining baselines across an enterprise?

CCSP From the perspective of compliance, what is the most important consideration when it comes to data center location?

CCSP Different certifications and standards take different approaches to data center design and operations. Although many traditional approaches use a tiered methodology, which of the following utilizes a macro-level approach to data center design?

CCSP The European Union is often considered the world leader in regard to the privacy of personal data and has declared privacy to be a "human right."In what year did the EU first assert this principle?

CCSP A DLP solution/implementation has three main components.Which of the following is NOT one of the three main components?

CCSP What type of storage structure does object storage employ to maintain files?

CCSP Which cloud storage type requires special consideration on the part of the cloud customer to ensure they do not program themselves into a vendor lock-in situation?

CCSP Which cloud deployment model would be ideal for a group of universities looking to work together, where each university can gain benefits according to its specific needs?

CCSP Data centers have enormous power resources that are distributed and consumed throughout the entire facility.Which of the following standards pertains to the proper fire safety standards within that scope?

CCSP Which of the following threat types involves an application that does not validate authorization for portions of itself beyond when the user first enters it?

CCSP Clustered systems can be used to ensure high availability and load balancing across individual systems through a variety of methodologies.What process is used within a clustered system to ensure proper load balancing and to maintain the health of the overall system to provide high availability?

CCSP Although the REST API supports a wide variety of data formats for communications and exchange, which data formats are the most commonly used?

CCSP The share phase of the cloud data lifecycle involves allowing data to leave the application, to be shared with external systems, services, or even other vendors/ contractors.What technology would be useful for protecting data at this point?

CCSP When an API is being leveraged, it will encapsulate its data for transmission back to the requesting party or service.What is the data encapsulation used with the SOAP protocol referred to as?

CCSP From a security perspective, what component of a cloud computing infrastructure represents the biggest concern?

CCSP Which of the following is NOT one of the main intended goals of a DLP solution?

CCSP Data center and operations design traditionally takes a tiered, topological approach.Which of the following standards is focused on that approach and is prevalently used throughout the industry?

CCSP Jurisdictions have a broad range of privacy requirements pertaining to the handling of personal data and information.Which jurisdiction requires all storage and processing of data that pertains to its citizens to be done on hardware that is physically located within its borders?

CCSP The management plane is used to administer a cloud environment and perform administrative tasks across a variety of systems, but most specifically it's used with the hypervisors.What does the management plane typically leverage for this orchestration?

CCSP When dealing with PII, which category pertains to those requirements that can carry legal sanctions or penalties for failure to adequately safeguard the data and address compliance requirements?

CCSP Although the United States does not have a single, comprehensive privacy and regulatory framework, a number of specific regulations pertain to types of data or populations.Which of the following is NOT a regulatory system from the United States federal government?

CCSP The president of your company has tasked you with implementing cloud services as the most efficient way of obtaining a robust disaster recovery configuration for your production services.Which of the cloud deployment models would you MOST likely be exploring?

CCSP If you are running an application that has strict legal requirements that the data cannot reside on systems that contain other applications or systems, which aspect of cloud computing would be prohibitive in this case?

CCSP The REST API is a widely used standard for communications of web-based services between clients and the servers hosting them.Which protocol does the REST API depend on?

CCSP Which of the following actions will NOT make data part of the create phase of the cloud data lifecycle?

CCSP Most APIs will support a variety of different data formats or structures.However, the SOAP API will only support which one of the following data formats?

CCSP Which cloud storage type is typically used to house virtual machine images that are used throughout the environment?

CCSP With an API, various features and optimizations are highly desirable to scalability, reliability, and security.What does the REST API support that the SOAP API does NOT support?

CCSP Although much of the attention given to data security is focused on keeping data private and only accessible by authorized individuals, of equal importance is the trustworthiness of the data.Which concept encapsulates this?