Get Special Discount Offer of CCSP Certification Exam Sample Questions and Answers [Q355-Q370] : Free Exam Dumps Collection : http://free.examcollectionpass.com

QUESTION 355
The destruction of a cloud customer’s data can be required by all of the following except ___________.

Statute

Regulation

The cloud provider’s policy

Contract

QUESTION 356
What is the amount of fuel that should be on hand to power generators for backup datacenter power, in all tiers, according to the Uptime Institute?

1

1,000 gallons

12 hours

As much as needed to ensure all systems may be gracefully shut down and data securely stored

QUESTION 357
During which phase of the cloud data lifecycle is it possible for the classification of data to change?

Use

Archive

Create

Share

QUESTION 358
Cryptographic keys should be secured ________________ .

To a level at least as high as the data they can decrypt

In vaults

With two-person integrity

By armed guards

QUESTION 359
Which of the following is a restriction that can be enforced by information rights management (IRM) that is not possible for traditional file system controls?

Delete

Modify

Read

Print

QUESTION 360
What are the six components that make up the STRIDE threat model?

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege

Spoofing, Tampering, Non-Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege

Spoofing, Tampering, Repudiation, Information Disclosure, Distributed Denial of Service, and Elevation of Privilege

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Social Engineering

QUESTION 361
Which technology can be useful during the “share” phase of the cloud data lifecycle to continue to protect data as it leaves the original system and security controls?

IPS

WAF

DLP

IDS

QUESTION 362
Gap analysis is performed for what reason?

To begin the benchmarking process

To assure proper accounting practices are being used

To provide assurances to cloud customers

To ensure all controls are in place and working properly

QUESTION 363
As part of the auditing process, getting a report on the deviations between intended configurations and actual policy is often crucial for an organization.
What term pertains to the process of generating such a report?

Deficiencies

Findings

Gap analysis

Errors

QUESTION 364
Designers making applications for the cloud have to take into consideration risks and operational constraints that did not exist or were not as pronounced in the legacy environment. Which of the following is an element cloud app designers may have to consider incorporating in software for the cloud that might not have been as important in the legacy environment?

IAM capability

DDoS resistance

Encryption for data at rest and in motion

Field validation

QUESTION 365
What concept does the D represent within the STRIDE threat model?

Denial of service

Distributed

Data breach

Data loss

QUESTION 366
Which of the following is NOT a common component of a DLP implementation process?
Response:

Discovery

Monitoring

Revision

Enforcement

QUESTION 367
Which of the following is a file server that provides data access to multiple, heterogeneous machines/users on the network?

Storage area network (SAN)

Network-attached storage (NAS)

Hardware security module (HSM)

Content delivery network (CDN)

QUESTION 368
When a data center is configured such that the backs of the devices face each other and the ambient temperature in the work area is cool, it is called ___________.
Response:

Hot aisle containment

Cold aisle containment

Thermo-optimized

HVAC modulated

QUESTION 369
What is the most secure form of code testing and review?

Open source

Proprietary/internal

Neither open source nor proprietary

Combination of open source and proprietary

QUESTION 370
Which of the following is NOT a component of access control?

Accounting

Federation

Authorization

Authentication