Real CCSP dumps Accurate Questions and Answers with Free and Fast Updates
Real CCSP Quesions Pass Certification Exams Easily
NEW QUESTION # 124
What is the intellectual property protection for a useful manufacturing innovation?
- A. patent
- B. Trade secret
- C. Copyright
- D. Trademark
Answer: A
Explanation:
Explanation/Reference:
Explanation:
Patents protect processes (as well as inventions, new plantlife, and decorative patterns). The other answers listed are answers to other questions.
NEW QUESTION # 125
Which of these characteristics of a virtualized network adds risks to the cloud environment?
- A. Redundancy
- B. Self-service
- C. Scalability
- D. Pay-per-use
Answer: A
NEW QUESTION # 126
What are the four cloud deployment models?
- A. External, Private, Hybrid, and Community
- B. Public, Internal, Hybrid, and Community
- C. Public, Private, Joint, and Community
- D. Public, Private, Hybrid, and Community
Answer: D
NEW QUESTION # 127
What does dynamic application security testing (DAST) NOT entail?
- A. Knowledge of the system
- B. Discovery
- C. Scanning
- D. Probing
Answer: A
Explanation:
Dynamic application security testing (DAST) is considered "black box" testing and begins with no inside knowledge of the application or its configurations. Everything about the application must be discovered during the testing.
NEW QUESTION # 128
What type of masking strategy involves making a separate and distinct copy of data with masking in place?
- A. Static
- B. Dynamic
- C. Duplication
- D. Replication
Answer: A
Explanation:
With static masking, a separate and distinct copy of the data set is created with masking in place.
This is typically done through a script or other process that takes a standard data set, processes it to mask the appropriate and predefined fields, and then outputs the data set as a new one with the completed masking done.
NEW QUESTION # 129
Which format is the most commonly used standard for exchanging information within a federated identity system?
- A. HTML
- B. XML
- C. JSON
- D. SAML
Answer: D
Explanation:
Explanation/Reference:
Explanation:
Security Assertion Markup Language (SAML) is the most common data format for information exchange within a federated identity system. It is used to transmit and exchange authentication and authorization data.XML is similar to SAML, but it's used for general-purpose data encoding and labeling and is not used for the exchange of authentication and authorization data in the way that SAML is for federated systems.
JSON is used similarly to XML, as a text-based data exchange format that typically uses attribute-value pairings, but it's not used for authentication and authorization exchange. HTML is used only for encoding web pages for web browsers and is not used for data exchange--and certainly not in a federated system.
NEW QUESTION # 130
Which United States program was designed to enable organizations to bridge the gap between privacy laws and requirements of the United States and the European Union?
- A. HIPAA
- B. GLBA
- C. Safe Harbor
- D. SOX
Answer: C
Explanation:
Explanation
Due to the lack of an adequate privacy law or protection at the federal level in the United States, European privacy regulations generally prohibit the exporting or sharing of PII from Europe with the United States.
Participation in the Safe Harbor program is voluntary on behalf of an organization, but it does require them to conform to specific requirements and policies that mirror those from the EU. Thus, organizations can fulfill requirements for data sharing and export and possibly serve customers in the EU.
NEW QUESTION # 131
Within a federated identity system, which entity accepts tokens from the identity provider?
- A. Relying party
- B. Proxy party
- C. Servicing party
- D. Assertion manager
Answer: A
Explanation:
The relying party is attached to the application or service that a user is trying to access, and it accepts authentication tokens from the user's own identity provider in order to facilitate authentication and access. The other terms provided are all associated with federated systems, but none is the correct choice in this case.
NEW QUESTION # 132
Which value refers to the amount of time it takes to recover operations in a BCDR situation to meet management's objectives?
- A. SRE
- B. RPO
- C. RTO
- D. RSL
Answer: C
Explanation:
Explanation/Reference:
Explanation:
The recovery time objective (RTO) is a measure of the amount of time it would take to recover operations in the event of a disaster to the point where management's objectives are met for BCDR.
NEW QUESTION # 133
Your company has just been served with an eDiscovery order to collect event data and other pertinent information from your application during a specific period of time, to be used as potential evidence for a court proceeding.
Which of the following, apart from ensuring that you collect all pertinent data, would be the MOST important consideration?
Response:
- A. Confidentiality
- B. Encryption
- C. Compression
- D. Chain of custody
Answer: D
NEW QUESTION # 134
Because cloud providers will not give detailed information out about their infrastructures and practices to the general public, they will often use established auditing reports to ensure public trust, where the reputation of the auditors serves for assurance.
Which type of audit reports can be used for general public trust assurances?
- A. SOC 3
- B. SAS-70
- C. SOC 2
- D. SOC 1
Answer: A
Explanation:
SOC Type 3 audit reports are very similar to SOC Type 2, with the exception that they are intended for general release and public audiences.SAS-70 audits have been deprecated. SOC Type 1 audit reports have a narrow scope and are intended for very limited release, whereas SOC Type 2 audit reports are intended for wider audiences but not general release.
NEW QUESTION # 135
If you're using iSCSI in a cloud environment, what must come from an external protocol or application?
- A. Authentication
- B. Encryption
- C. Kerberos support
- D. CHAP support
Answer: B
Explanation:
iSCSI does not natively support encryption, so another technology such as IPsec must be used to encrypt communications.
NEW QUESTION # 136
Which cloud service category offers the most customization options and control to the cloud customer?
- A. IaaS
- B. PaaS
- C. SaaS
- D. DaaS
Answer: A
NEW QUESTION # 137
Which data formats are most commonly used with the REST API?
- A. XML and JSON
- B. SAML and HTML
- C. JSON and SAML
- D. XML and SAML
Answer: A
Explanation:
JavaScript Object Notation (JSON) and Extensible Markup Language (XML) are the most commonly used data formats for the Representational State Transfer (REST) API, and are typically implemented with caching for increased scalability and performance.
NEW QUESTION # 138
Just like the risk management process, the BCDR planning process has a defined sequence of steps and processes to follow to ensure the production of a comprehensive and successful plan.
Which of the following is the correct sequence of steps for a BCDR plan?
- A. Define scope, gather requirements, implement, assess risk
- B. Define scope, gather requirements, assess risk, implement
- C. Gather requirements, define scope, implement, assess risk
- D. Gather requirements, define scope, assess risk, implement
Answer: B
Explanation:
The correct sequence for a BCDR plan is to define the scope, gather requirements based on the scope, assess overall risk, and implement the plan. The other sequences provided are not in the correct order.
NEW QUESTION # 139
What is the cloud service model in which the customer is responsible for administration of the OS?
- A. IaaS
- B. PaaS
- C. QaaS
- D. SaaS
Answer: A
Explanation:
Explanation
In IaaS, the cloud provider only owns the hardware and supplies the utilities. The customer is responsible for the OS, programs, and data. In PaaS and SaaS, the provider also owns the OS. There is no QaaS. That is a red herring.
NEW QUESTION # 140
Which of the following data protection methodologies maintains the ability to connect back values to the original values?
- A. Anonymization
- B. Tokenization
- C. Obfuscation
- D. Dynamic mapping
Answer: B
NEW QUESTION # 141
Federation should be __________ to the users.
- A. Hostile
- B. Transparent
- C. Proportional
- D. Expensive
Answer: B
NEW QUESTION # 142
......
The CCSP Certification Exam is a valuable credential that demonstrates a professional's expertise in cloud security. It is recognized by organizations around the world and can help professionals advance their careers in the field of cloud security. Certified Cloud Security Professional certification is valid for three years and requires that professionals maintain their knowledge and skills through continuing education and professional development activities.
CCSP Dumps are Available for Instant Access: https://www.testpdf.com/CCSP-exam-braindumps.html
Practice with these CCSP dumps Certification Sample Questions: https://drive.google.com/open?id=1EgDYBzqU3Xn5O7iAG3arsRMTcjFt2LY8
