CCSP Exam Dumps | What expectation of data custodians is made much more challenging by a cloud implementation, especially

<< Prev Question Next Question >>

Question 185/356

What expectation of data custodians is made much more challenging by a cloud implementation, especially with PaaS or SaaS?

A. Data classification

B. Knowledge of systems

C. Access to data

D. Encryption requirements

Question List (356q): Question 1: A bare-metal hypervisor is Type ____________....; Question 2: Many aspects and features of cloud computing can make eDisco...; Question 3: How is an object stored within an object storage system?...; Question 4: A variety of security systems can be integrated within a net...; Question 5: Which of the following is NOT a function performed by the re...; Question 6: What is the intellectual property protection for the logo of...; Question 7: Which of the following is not a reason for conducting audits...; Question 8: Which of the following is not one of the defined security co...; Question 9: Which kind of SSAE audit reviews controls dealing with the o...; Question 10: What is the biggest concern with hosting a key management sy...; Question 11: What is the amount of fuel that should be on hand to power g...; Question 12: Who will determine data classifications for the cloud custom...; Question 13: Which of the following is an example of useful and sufficien...; Question 14: You are the security manager for a software development firm...; Question 15: Cloud environments are based entirely on virtual machines an...; Question 16: Data labels could include all the following, except:...; Question 17: Cloud vendors are held to contractual obligations with speci...; Question 18: DLP can be combined with what other security technology to e...; Question 19: A comprehensive BCDR plan will encapsulate many or most of t...; Question 20: Which of the following concepts is NOT one of the core compo...; Question 21: Which of the following threat types involves an application ...; Question 22: Which of the following in a federated environment is respons...; Question 23: What does the REST API use to protect data transmissions?...; Question 24: What is one of the reasons a baseline might be changed?...; Question 25: Although performing BCDR tests at regular intervals is a bes...; Question 26: The Cloud Security Alliance's (CSA's) Cloud Controls Matrix ...; Question 27: Which of the following approaches would NOT be considered su...; Question 28: Which cloud service category brings with it the most expensi...; Question 29: An SLA contains the official requirements for contract perfo...; Question 30: What is the primary security mechanism used to protect SOAP ...; Question 31: Which of the following would probably best aid an organizati...; Question 32: SOC Type 1 reports are considered "restricted use," in that ...; Question 33: You are the security policy lead for your organization, whic...; Question 34: Software-defined networking (SDN) is intended to separate di...; Question 35: Which publication from the United States National Institute ...; Question 36: In general, a cloud BCDR solution will be _________ than a p...; Question 37: What concept and operational process must be spelled out cle...; Question 38: Which of the following are distinguishing characteristics of...; Question 39: Many different common threats exist against web-exposed serv...; Question 40: You are the security manager of a small firm that has just p...; Question 41: To protect data on user devices in a BYOD environment, the o...; Question 42: Who is ultimately responsible for a data breach that include...; Question 43: What type of solution is at the core of virtually all direct...; Question 44: What are third-party providers of IAM functions for the clou...; Question 45: What is the term that describes the situation when a malicio...; Question 46: Which of the following is the sole responsibility of the clo...; Question 47: Although the REST API supports a wide variety of data format...; Question 48: Which of the following is the sole responsibility of the clo...; Question 49: Which of the following standards primarily pertains to cabli...; Question 50: Which data state would be most likely to use digital signatu...; Question 51: Which format is the most commonly used standard for exchangi...; Question 52: Which of the following threat types involves an application ...; Question 53: Data labels could include all the following, except:...; Question 54: Which of the following is the primary purpose of an SOC 3 re...; Question 55: Which cloud storage type requires special consideration on t...; Question 56: Cryptographic keys for encrypted data stored in the cloud sh...; Question 57: You are developing a new process for data discovery for your...; Question 58: What is the biggest negative to leasing space in a data cent...; Question 59: All of the following are usually nonfunctional requirements ...; Question 60: An audit scope statement defines the limits and outcomes fro...; Question 61: Which of the following aspects of cloud computing would make...; Question 62: Every cloud service provider that opts to join the CSA STAR ...; Question 63: All of the following entitles are required to use FedRAMP-ac...; Question 64: Who would be responsible for implementing IPsec to secure co...; Question 65: Which crucial aspect of cloud computing can be most threaten...; Question 66: What category of PII data can carry potential fines or even ...; Question 67: Which of the following frameworks focuses specifically on de...; Question 68: Identity and access management (IAM) is a security disciplin...; Question 69: Tokenization requires at least ____ database(s)....; Question 70: You work for a company that operates a production environmen...; Question 71: Which of the following is not one of the types of controls?...; Question 72: Which of the following BCDR testing methodologies is least i...; Question 73: You are the security director for a chain of automotive repa...; Question 74: What must be secured on physical hardware to prevent unautho...; Question 75: When using a PaaS solution, what is the capability provided ...; Question 76: Which of the following pertains to a macro level approach to...; Question 77: Which phase of the cloud data lifecycle would be the MOST ap...; Question 78: What is the correct order of the phases of the data life cyc...; Question 79: SOX was enacted because of which of the following?...; Question 80: Which of the following would NOT be included as input into t...; Question 81: Which protocol allows a system to use block-level storage as...; Question 82: Which cloud storage type uses an opaque value or descriptor ...; Question 83: When beginning an audit, both the system owner and the audit...; Question 84: When a data center is configured such that the backs of the ...; Question 85: The destruction of a cloud customer's data can be required b...; Question 86: Which of the following is a restriction that can be enforced...; Question 87: Which of the following are the storage types associated with...; Question 88: Your company maintains an on-premises data center for daily ...; Question 89: TLS provides and ________ for ________ communications....; Question 90: Which aspect of cloud computing will be most negatively impa...; Question 91: Tokenization requires two distinct ______________. Response:...; Question 92: What strategy involves hiding data in a data set to prevent ...; Question 93: Gathering business requirements can aid the organization in ...; Question 94: Which cloud service category offers the most customization o...; Question 95: Which of the following may unilaterally deem a cloud hosting...; Question 96: Which security concept, if implemented correctly, will prote...; Question 97: Which of the following areas of responsibility would be shar...; Question 98: What type of redundancy can we expect to find in a datacente...; Question 99: What is a data custodian responsible for?...; Question 100: From a security perspective, what component of a cloud compu...; Question 101: Which value refers to the amount of time it takes to recover...; Question 102: Although indirect identifiers cannot alone point to an indiv...; Question 103: You work for a government research facility. Your organizati...; Question 104: Which protocol, as a part of TLS, handles negotiating and es...; Question 105: What is the term used to describe loss of access to data bec...; Question 106: When using an IaaS solution, what is the capability provided...; Question 107: Being in a cloud environment, cloud customers lose a lot of ...; Question 108: All of the following are terms used to described the practic...; Question 109: Which SSAE 16 report is purposefully designed for public rel...; Question 110: The management plane is used to administer a cloud environme...; Question 111: Which of the following best describes the Organizational Nor...; Question 112: What are the phases of a software development lifecycle proc...; Question 113: Which technology can be useful during the "share" phase of t...; Question 114: When using an IaaS solution, what is a key benefit provided ...; Question 115: Which of the following is NOT one of the main intended goals...; Question 116: What is a form of cloud storage where data is stored as obje...; Question 117: Countermeasures for protecting cloud operations against inte...; Question 118: Which of the following actions will NOT make data part of th...; Question 119: Alice is the CEO for a software company; she is considering ...; Question 120: What process is used within a clustered system to provide hi...; Question 121: A denial of service (DoS) attack can potentially impact all ...; Question 122: Cryptographic keys for encrypted data stored in the cloud sh...; Question 123: You are the security manager for a small retail business inv...; Question 124: Which value refers to the percentage of production level res...; Question 125: What type of PII is controlled based on laws and carries leg...; Question 126: Virtual machine (VM) configuration management (CM) tools sho...; Question 127: Gap analysis is performed for what reason?...; Question 128: On large distributed systems with pooled resources, cloud co...; Question 129: Which United States program was designed to enable organizat...; Question 130: Which security concept is based on preventing unauthorized a...; Question 131: Which of the following is NOT a function performed by the ha...; Question 132: Cloud systems are increasingly used for BCDR solutions for o...; Question 133: What can tokenization be used for?...; Question 134: Which of the following storage types is most closely associa...; Question 135: Which kind of SSAE audit report is most beneficial for a clo...; Question 136: Which of the following is NOT a common component of a DLP im...; Question 137: Which of the following is the best and only completely secur...; Question 138: Clustered systems can be used to ensure high availability an...; Question 139: What type of identity system allows trust and verifications ...; Question 140: Which of the following should occur at each stage of the SDL...; Question 141: There is a large gap between the privacy laws of the United ...; Question 142: Which of the following should NOT be part of the requirement...; Question 143: You are the security manager for an online retail sales comp...; Question 144: At which phase of the SDLC process should security begin par...; Question 145: DLP solutions can aid in deterring loss due to which of the ...; Question 146: Which of these characteristics of a virtualized network adds...; Question 147: What are the U.S. Commerce Department controls on technology...; Question 148: Three central concepts define what type of data and informat...; Question 149: Your IT steering committee has, at a high level, approved yo...; Question 150: What does static application security testing (SAST) offer a...; Question 151: During which phase of the cloud data lifecycle is it possibl...; Question 152: What is the concept of isolating an application from the und...; Question 153: Which of the following are considered to be the building blo...; Question 154: A data custodian is responsible for which of the following?...; Question 155: What is used for local, physical access to hardware within a...; Question 156: Limits for resource utilization can be set at different leve...; Question 157: Which of the following would NOT be considered part of resou...; Question 158: Anonymization is the process of removing from data sets. Res...; Question 159: Your company operates in a highly competitive market, with e...; Question 160: The president of your company has tasked you with implementi...; Question 161: Which of the following are not examples of personnel control...; Question 162: Managed cloud services exist because the service is less exp...; Question 163: Which technology is NOT commonly used for security with data...; Question 164: You work for a government research facility. Your organizati...; Question 165: Which United States law is focused on PII as it relates to t...; Question 166: What aspect of a Type 2 hypervisor involves additional secur...; Question 167: Which of the cloud deployment models requires the cloud cust...; Question 168: Which data formats are most commonly used with the REST API?...; Question 169: Which of the following threat types involves the sending of ...; Question 170: Because cloud providers will not give detailed information o...; Question 171: Which technology is most associated with tunneling? Response...; Question 172: What is an often overlooked concept that is essential to pro...; Question 173: Within a SaaS environment, what is the responsibility on the...; Question 174: What is the best source for information about securing a phy...; Question 175: At which layer does the IPSec protocol operate to encrypt an...; Question 176: When an organization considers cloud migrations, the organiz...; Question 177: Which of the following represents a minimum guaranteed resou...; Question 178: IRM solutions allow an organization to place different restr...; Question 179: When using an Infrastructure as a Service (IaaS) solution, w...; Question 180: The Restatement (Second) Conflict of Law refers to which of ...; Question 181: There are two reasons to conduct a test of the organization'...; Question 182: Which if the following is NOT one of the three components of...; Question 183: What aspect of data center planning occurs first?...; Question 184: For service provisioning and support, what is the ideal amou...; Question 185: What expectation of data custodians is made much more challe...; Question 186: Your company has just been served with an eDiscovery order t...; Question 187: Which of the following roles involves overseeing billing, pu...; Question 188: Which of the following is a file server that provides data a...; Question 189: In order to prevent cloud customers from potentially consumi...; Question 190: Your application has been a continued target for SQL injecti...; Question 191: Which concept BEST describes the capability for a cloud envi...; Question 192: Which of the following is NOT a criterion for data within th...; Question 193: A crucial decision any company must make is in regard to whe...; Question 194: You are the IT director for a small contracting firm. Your c...; Question 195: What concept does the A represent within the DREAD model?...; Question 196: Which of the following is considered an administrative contr...; Question 197: In which of the following situations does the data owner hav...; Question 198: A virtual network interface card (NIC) exists at layer _____...; Question 199: What concept does the "I" represent with the STRIDE threat m...; Question 200: The Cloud Security Alliance (CSA) publishes the Notorious Ni...; Question 201: The cloud deployment model that features joint ownership of ...; Question 202: Which ISO standard refers to addressing security risks in a ...; Question 203: The Cloud Security Alliance (CSA) publishes, the Notorious N...; Question 204: What sort of legal enforcement may the Payment Card Industry...; Question 205: What are the two protocols that TLS uses?...; Question 206: Which aspect of data poses the biggest challenge to using au...; Question 207: Which of the following best describes the purpose and scope ...; Question 208: With a federated identity system, where would a user perform...; Question 209: A DLP solution/implementation has three main components. Whi...; Question 210: The Cloud Security Alliance (CSA) publishes the Notorious Ni...; Question 211: SOC 2 reports were intended to be ____________....; Question 212: During the assessment phase of a risk evaluation, what are t...; Question 213: TLS uses ___________ to authenticate a connection and create...; Question 214: You are the security manager of a small firm that has just p...; Question 215: Which United States law is focused on accounting and financi...; Question 216: Which of the following types of organizations is most likely...; Question 217: Which cloud service category most commonly uses client-side ...; Question 218: BCDR strategies typically do not involve the entire operatio...; Question 219: Which kind of SSAE report comes with a seal of approval from...; Question 220: Which United States law is focused on data related to health...; Question 221: The Cloud Security Alliance (CSA) publishes the Notorious Ni...; Question 222: Which of the following storage types are used with an Infras...; Question 223: What type of masking strategy involves replacing data on a s...; Question 224: When using a SaaS solution, what is the capability provided ...; Question 225: It is important to include _______ in the design of underflo...; Question 226: Which type of cloud service category would having a vendor-n...; Question 227: Database activity monitoring (DAM) can be:...; Question 228: Maintenance mode requires all of these actions except:...; Question 229: Which of the following is NOT a major regulatory framework?...; Question 230: Access should be based on ____________. Response:...; Question 231: Which of the following is the best example of a key componen...; Question 232: What type of device is often leveraged to assist legacy appl...; Question 233: Which of the following is the recommended operating range fo...; Question 234: Tokenization requires two distinct _________________ ....; Question 235: Which security concept would business continuity and disaste...; Question 236: Which of the following threat types can occur when baselines...; Question 237: Just like the risk management process, the BCDR planning pro...; Question 238: Which of the following is a method for apportioning resource...; Question 239: Penetration testing is a(n) __________ form of security asse...; Question 240: Which of the following is characterized by a set maximum cap...; Question 241: You need to gain approval to begin moving your company's dat...; Question 242: Which of the cloud cross-cutting aspects relates to the abil...; Question 243: In attempting to provide a layered defense, the security pra...; Question 244: Which of the following is not typically included in the list...; Question 245: Which of the following methods for the safe disposal of elec...; Question 246: If bit-splitting is used to store data sets across multiple ...; Question 247: Which of the following is considered an external redundancy ...; Question 248: Which cloud storage type resembles a virtual hard drive and ...; Question 249: In the wake of many scandals with major corporations involvi...; Question 250: When crafting plans and policies for data archiving, we shou...; Question 251: Humidity levels for a data center are a prime concern for ma...; Question 252: Which of the following does NOT relate to the hiding of sens...; Question 253: Which of the following are cloud computing roles?...; Question 254: A cloud data encryption situation where the cloud customer r...; Question 255: Which of the following is the biggest concern or challenge w...; Question 256: The European Union passed the first major regulation declari...; Question 257: Which of the following is the optimal temperature for a data...; Question 258: According to the (ISC)2 Cloud Secure Data Life Cycle, which ...; Question 259: Which of the following is NOT something that an HIDS will mo...; Question 260: The physical layout of a cloud data center campus should inc...; Question 261: In addition to whatever audit results the provider shares wi...; Question 262: Which of the following methods of addressing risk is most as...; Question 263: Why might an organization choose to comply with the ISO 2700...; Question 264: Which concept pertains to cloud customers paying only for th...; Question 265: Which of the following threat types involves the sending of ...; Question 266: Which of the following is NOT one of the official risk ratin...; Question 267: Which type of cloud-based storage is IRM typically associate...; Question 268: Which of the following is a management role, versus a techni...; Question 269: What does dynamic application security testing (DAST) NOT en...; Question 270: Which of the following storage types is most closely associa...; Question 271: Which of the following features is a main benefit of PaaS ov...; Question 272: Of the following, which is probably the most significant ris...; Question 273: Many activities within a cloud environment are performed via...; Question 274: The various models generally available for cloud BC/DR activ...; Question 275: Which of the following methods of addressing risk is most as...; Question 276: Which of the following is NOT a component of access control?...; Question 277: Which aspect of cloud computing serves as the biggest challe...; Question 278: Which one of the following is not one of the three common th...; Question 279: Which of the following APIs are most commonly used within a ...; Question 280: Which type of cloud model typically presents the most challe...; Question 281: Which of the following characteristics is associated with di...; Question 282: Different certifications and standards take different approa...; Question 283: Which of the following roles would be responsible for managi...; Question 284: Which one of the following threat types to applications and ...; Question 285: Because PaaS implementations are so often used for software ...; Question 286: Which of the following report is most aligned with financial...; Question 287: You are the security subject matter expert (SME) for an orga...; Question 288: You are working for a cloud service provider and receive an ...; Question 289: Security best practices in a virtualized network environment...; Question 290: Each of the following is an element of the Identification ph...; Question 291: You are the security manager of a small firm that has just p...; Question 292: Which of the following is NOT a core component of an SIEM so...; Question 293: The cloud deployment model that features organizational owne...; Question 294: Who is the entity identified by personal data?...; Question 295: Which of the cloud cross-cutting aspects relates to the over...; Question 296: A UPS should have enough power to last how long?...; Question 297: The Transport Layer Security (TLS) protocol creates a secure...; Question 298: The tasks performed by the hypervisor in the virtual environ...; Question 299: Which of the following terms is not associated with cloud fo...; Question 300: What are SOCI/SOCII/SOCIII?; Question 301: Which attribute of data poses the biggest challenge for data...; Question 302: The Open Web Application Security Project (OWASP) Top Ten is...; Question 303: Which of the following security measures done at the network...; Question 304: Digital rights management (DRM) tools can be combined with _...; Question 305: With a cloud service category where the cloud customer is pr...; Question 306: While an audit is being conducted, which of the following co...; Question 307: Which of the following systems is used to employ a variety o...; Question 308: In order to comply with regulatory requirements, which of th...; Question 309: What strategy involves replacing sensitive data with opaque ...; Question 310: Which of the following could be used as a second component o...; Question 311: What is the primary reason that makes resolving jurisdiction...; Question 312: ____________ can often be the result of inadvertent activity...; Question 313: Which of the following best describes SAML?...; Question 314: Application virtualization can typically be used for _______...; Question 315: Which of the following actions will NOT make data part of th...; Question 316: You are the security manager for a software development firm...; Question 317: Which security certification serves as a general framework t...; Question 318: If a key feature of cloud computing that your organization d...; Question 319: What is the term we use to describe the general ease and eff...; Question 320: Which of the following is a widely used tool for code develo...; Question 321: Which of the following is not a feature of SAST?...; Question 322: Which of the following is NOT an application or utility to a...; Question 323: Which key storage solution would be the BEST choice in a sit...; Question 324: Cryptographic keys should be secured ________________ ....; Question 325: Although encryption can help an organization to effectively ...; Question 326: Which of the following statements accurately describes VLANs...; Question 327: The Brewer-Nash security model is also known as which of the...; Question 328: Halon is now illegal to use for data center fire suppression...; Question 329: Typically, SSDs are ____________. Response:...; Question 330: Which of the cloud deployment models offers the most control...; Question 331: DRM solutions should generally include all the following fun...; Question 332: Which phase of the cloud data lifecycle involves processing ...; Question 333: Which of the following is not a component of contractual PII...; Question 334: Which of the following is NOT one of the security domains pr...; Question 335: Which of the following roles involves the provisioning and d...; Question 336: Hardening the operating system refers to all of the followin...; Question 337: Which of the following is a possible negative aspect of bit-...; Question 338: Which of the following service capabilities gives the cloud ...; Question 339: Which of the following is not a risk management framework?...; Question 340: BCDR strategies typically do not involve the entire operatio...; Question 341: Which of the following is a risk in the cloud environment th...; Question 342: What is a cloud storage architecture that manages the data i...; Question 343: Which of the following aspects of the BC/DR process poses a ...; Question 344: A firewall can use all of the following techniques for contr...; Question 345: What is the best approach for dealing with services or utili...; Question 346: Modern web service systems are designed for high availabilit...; Question 347: When designing a cloud data center, which of the following a...; Question 348: Deviations from the baseline should be investigated and ____...; Question 349: If a cloud computing customer wishes to guarantee that a min...; Question 350: What concept does the "T" represent in the STRIDE threat mod...; Question 351: What is the major difference between authentication/authoriz...; Question 352: Which of the following is NOT a key area for performance mon...; Question 353: What are SOC 1/SOC 2/SOC 3?; Question 354: Which value refers to the amount of data an organization wou...; Question 355: Which of the following is not included in the OWASP Top Ten ...; Question 356: Which of the following represents a prioritization of applic...

Question 185/356

LEAVE A REPLY

Download PDF File