100% Updated ISC CCSP Enterprise PDF Dumps

Use Valid Exam CCSP by ValidExam Books For Free Website

NEW QUESTION # 115
You are the security manager for an online retail sales company with 100 employees and a production environment hosted in a PaaS model with a major cloud provider. Your company policies have allowed for a BYOD workforce that work equally from the company offices and their own homes or other locations. The policies also allow users to select which APIs they install and use on their own devices in order to access and manipulate company data.
Of the following, what is a security control you'd like to implement to offset the risk(s) incurred by this practice?

• A. More extensive and granular background checks on all employees, particularly new hires
• B. Regular and widespread integrity checks on sampled data throughout the managed environment
• C. Inclusion of references to all applicable regulations in the policy documents
• D. Increased enforcement of separation of duties for all workflows

Answer: B

NEW QUESTION # 116
Which of the following is a method for apportioning resources that involves prioritizing resource requests to resolve contention situations?

• A. Shares
• B. Limits
• C. Reservations
• D. Cancellations

Answer: A

NEW QUESTION # 117
Which of the following technologies is NOT commonly used for accessing systems and services in a cloud environment in a secure manner?

• A. VPN
• B. TLS
• C. HTTPS
• D. KVM

Answer: D

Explanation:
Explanation/Reference:
Explanation:
A keyboard-video-mouse (KVM) system is commonly used for directly accessing server terminals in a data center. It is not a method that would be possible within a cloud environment, primarily due to the use virtualized systems, but also because only the cloud provider's staff would be allowed the physical access to hardware systems that's provided by a KVM. Hypertext Transfer Protocol Secure (HTTPS), virtual private network (VPN), and Transport Layer Security (TLS) are all technologies and protocols that are widely used with cloud implementations for secure access to systems and services.

NEW QUESTION # 118
Which of the following is not one of the types of controls?
Response:

• A. Transitional
• B. Physical
• C. Technical
• D. Administrative

Answer: A

NEW QUESTION # 119
What are the U.S. State Department controls on technology exports known as?

• A. EAL
• B. ITAR
• C. DRM
• D. EAR

Answer: D

Explanation:
ITAR is a Department of State program. Evaluation assurance levels are part of the Common Criteria standard from ISO. Digital rights management tools are used for protecting electronic processing of intellectual property.

NEW QUESTION # 120
In attempting to provide a layered defense, the security practitioner should convince senior management to include security controls of which type?
Response:

• A. Technological
• B. All of the above
• C. Physical
• D. Administrative

Answer: B

NEW QUESTION # 121
What does dynamic application security testing (DAST) NOT entail?

• A. Discovery
• B. Scanning
• C. Probing
• D. Knowledge of the system

Answer: D

Explanation:
Dynamic application security testing (DAST) is considered "black box" testing and begins with no inside knowledge of the application or its configurations. Everything about the application must be discovered during the testing.

NEW QUESTION # 122
The European Union passed the first major regulation declaring data privacy to be a human right. In what year did it go into effect?

• A. 0
• B. 1
• C. 2
• D. 3

Answer: B

Explanation:
Explanation/Reference:
Explanation:
Adopted in 1995, Directive 95/46 EC establishes strong data protection and policy requirements, including the declaring of data privacy to be a human right. It establishes that an individual has the right to be notified when their personal data is being access or processed, that it only will ever be accessed for legitimate purposes, and that data will only be accessed to the exact extent it needs to be for the particular process or request.

NEW QUESTION # 123
Humidity levels for a data center are a prime concern for maintaining electrical and computing resources properly as well as ensuring that conditions are optimal for top performance.
Which of the following is the optimal humidity level, as established by ASHRAE?

• A. 50 to 75 percent relative humidity
• B. 20 to 40 percent relative humidity
• C. 40 to 60 percent relative humidity
• D. 30 to 50 percent relative humidity

Answer: C

Explanation:
The American Society of Heating, Refrigeration, and Air Conditioning Engineers (ASHRAE) recommends 40 to 60 percent relatively humidity for data centers. None of these options is the recommendation from ASHRAE.

NEW QUESTION # 124
Key maintenance and security are paramount within a cloud environment due to the widespread use of encryption for both data and transmissions.
Which of the following key-management systems would provide the most robust control over and ownership of the key-management processes for the cloud customer?

• A. Local key management service
• B. Internal key management service
• C. Remote key management service
• D. Client key management service

Answer: C

Explanation:
Explanation/Reference:
Explanation:
A remote key management system resides away from the cloud environment and is owned and controlled by the cloud customer. With the use of a remote service, the cloud customer can avoid being locked into a proprietary system from the cloud provider, but also must ensure that service is compatible with the services offered by the cloud provider. A local key management system resides on the actual servers using the keys, which does not provide optimal security or control over them. Both the terms internal key management service and client key management service are provided as distractors.

NEW QUESTION # 125
When crafting plans and policies for data archiving, we should consider all of the following, except:

• A. The backup process
• B. Archive location
• C. The format of the data
• D. Immediacy of the technology

Answer: C

NEW QUESTION # 126
Within a SaaS environment, what is the responsibility on the part of the cloud customer in regard to procuring the software used?

• A. Purchasing
• B. Licensing
• C. Development
• D. Maintenance

Answer: B

Explanation:
Explanation
Within a SaaS implementation, the cloud customer licenses the use of the software from the cloud provider because SaaS delivers a fully functional application to the customer. With SaaS, the cloud provider is responsible for the entire software application and any necessary infrastructure to develop, run, and maintain it. The purchasing, development, and maintenance are fully the responsibility of the cloud provider.

NEW QUESTION # 127
What is a form of cloud storage where data is stored as objects, arranged in a hierarchal structure, like a file tree?

• A. Databases
• B. Content delivery network (CDN)
• C. Volume storage
• D. Object storage

Answer: D

NEW QUESTION # 128
What is the Cloud Security Alliance Cloud Controls Matrix (CCM)?

• A. A set of software development life cycle requirements for cloud service providers
• B. An inventory of cloud services security controls that are arranged into a hierarchy of security domains
• C. A set of regulatory requirements for cloud service providers
• D. An inventory of cloud service security controls that are arranged into separate security domains

Answer: D

Explanation:
Explanation
The CSA CCM is an inventory of cloud service security controls that are arranged into separate security domains, not a hierarchy.

NEW QUESTION # 129
What concept does the D represent within the STRIDE threat model?

• A. Distributed
• B. Denial of service
• C. Data breach
• D. Data loss

Answer: B

Explanation:
Explanation
Any application can be a possible target of denial of service (DoS) attacks. From the application side, the developers should minimize how many operations are performed for unauthenticated users. This will keep the application running as quickly as possible and using the least amount of system resources to help minimize the impact of any such attacks. None of the other options provided is the correct term.

NEW QUESTION # 130
......

ISC CCSP Official Cert Guide PDF: https://www.validexam.com/CCSP-latest-dumps.html

Free ISC Cloud Security CCSP Official Cert Guide PDF Download: https://drive.google.com/open?id=1zVrafZBRT8FwErsd5Scy6jWlVqYmyKQt