ISC2 CCSP Exam Practice Test Instant Access

Question 1

Which of the following best describes a cloud carrier?

AThe intermediary who provides connectivity and transport of cloud providers and cloud consumers

BA person or entity responsible for making a cloud service available to consumers

CThe person or entity responsible for transporting data across the Internet

DThe person or entity responsible for keeping cloud services running for customers

Answer : A

A cloud carrier is the intermediary who provides connectivity and transport of cloud services between cloud providers and cloud customers.

Question 2

Maintenance mode requires all of these actions except:

ARemove all active production instances

BEnsure logging continues

CInitiate enhanced security controls

DPrevent new logins

Answer : C

While the other answers are all steps in moving from normal operations to maintenance mode, we do not necessarily initiate any enhanced security controls.

Question 3

Identity and access management (IAM) is a security discipline that ensures which of the following?

AThat all users are properly authorized

BThat the right individual gets access to the right resources at the right time for the right reasons.

CThat all users are properly authenticated

DThat unauthorized users will get access to the right resources at the right time for the right reasons

Answer : B

Options A and C are also correct, but included in B, making B the best choice. D is incorrect, because we don't want unauthorized users gaining access.

Question 4

For performance purposes, OS monitoring should include all of the following except:

ADisk space

BDisk I/O usage

CCPU usage

DPrint spooling

Answer : D

Print spooling is not a metric for system performance; all the rest are.

Question 5

In addition to battery backup, a UPS can offer which capability?

ABreach alert

BConfidentiality

CCommunication redundancy

DLine conditioning

Answer : D

A UPS can provide line conditioning, adjusting power so that it is optimized for the devices it serves and smoothing any power fluctuations; it does not offer any of the other listed functions.

Question 6

A UPS should have enough power to last how long?

AOne day

B12 hours

CLong enough for graceful shutdown

D10 minutes

Answer : C

Question 7

Which of the following best describes the Organizational Normative Framework (ONF)?

AA set of application security, and best practices, catalogued and leveraged by the organization

BA container for components of an application's security, best practices catalogued and leveraged by the organization

CA framework of containers for some of the components of application security, best practices, catalogued and leveraged by the organization

DA framework of containers for all components of application security, best practices, catalogued and leveraged by the organization.

Answer : D

Option B is incorrect, because it refers to a specific applications security elements, meaning it is about an ANF, not the ONF. C is true, but not as complete as D, making D the better choice. C suggests that the framework contains only ''some'' of the components, which is why B (which describes ''all'' components) is better

ISC2 CCSP Certified Cloud Security Professional Exam Practice Test