ISC2 CCSP Quiz 30 Topic 10 Questions 146-150

Question: 1

Which of the following is the best and only completely secure method of data destruction?

Response:

ADegaussing

BCrypto-shredding

CPhysical destruction of resources that store the data

DLegal order issued by the prevailing jurisdiction where the data is geographically situated

Show Answer

Question: 2

You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment.

In order to get truly holistic coverage of your environment, you should be sure to include __________ as a step in the deployment process.

Response:

AGetting signed user agreements from all users

BInstallation of the solution on all assets in the cloud data center

CAdoption of the tool in all routers between your users and the cloud provider

DAll of your customers to install the tool

Show Answer

Question: 3

The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing.

According to the CSA, what is one reason the threat of insecure interfaces and APIs is so prevalent in cloud computing?

Response:

ACloud customers and third parties are continually enhancing and modifying APIs.

BAPIs can have automated settings.

CIt is impossible to uninstall APIs.

DAPIs are a form of malware.

Show Answer

Question: 4

Which document will enforce uptime and availability requirements between the cloud customer and cloud provider?

Response:

AContract

BOperational level agreement

CService level agreement

DRegulation

Show Answer

Question: 5

All of the following are terms used to described the practice of obscuring original raw data so that only a portion is displayed for operational purposes, except:

Response:

ATokenization

BData discovery

CObfuscation

DMasking

Show Answer

ISC2 CCSP Quiz:30 Topic:10 Questions:146-150