CCSP Exam - Free Actual Q&As, Page 1

CCSP Actual Exam Questions

Last updated on Dec. 10, 2024.

Vendor:ISC

Exam Code:CCSP

Exam Name:Certified Cloud Security Professional (CCSP)

Exam Questions:512

Topic 1 - Single Topic

Question #1 Topic 1

Which of the following roles is responsible for creating cloud components and the testing and validation of services?

A. Cloud auditor
B. Inter-cloud provider
C. Cloud service broker
D. Cloud service developer

Reveal Solution Discussion 11

Correct Answer: D 🗳️

Question #2 Topic 1

What is the best source for information about securing a physical asset's BIOS?

A. Security policies
B. Manual pages
C. Vendor documentation
D. Regulations

Reveal Solution Discussion 6

Correct Answer: C 🗳️

Question #3 Topic 1

Which of the following is not a component of contractual PII?

A. Scope of processing
B. Value of data
C. Location of data
D. Use of subcontractors

Reveal Solution Discussion 20

Correct Answer: B 🗳️

Question #4 Topic 1

Which of the following concepts refers to a cloud customer paying only for the resources and offerings they use within a cloud environment, and only for the duration that they are consuming them?

A. Consumable service
B. Measured service
C. Billable service
D. Metered service

Reveal Solution Discussion 13

Correct Answer: B 🗳️
Measured service is where cloud services are delivered and billed in a metered way, where the cloud customer only pays for those that they actually use, and for the duration of time that they use them.

Question #5 Topic 1

Which of the following roles involves testing, monitoring, and securing cloud services for an organization?

A. Cloud service integrator
B. Cloud service business manager
C. Cloud service user
D. Cloud service administrator

Reveal Solution Discussion 4

Correct Answer: D 🗳️

Question #6 Topic 1

What is the only data format permitted with the SOAP API?

A. HTML
B. SAML
C. XSML
D. XML

Reveal Solution Discussion 2

Correct Answer: D 🗳️
The SOAP protocol only supports the XML data format.

Question #7 Topic 1

Which data formats are most commonly used with the REST API?

A. JSON and SAML
B. XML and SAML
C. XML and JSON
D. SAML and HTML

Reveal Solution Discussion 3

Correct Answer: C 🗳️

Question #8 Topic 1

Which of the following threat types involves an application that does not validate authorization for portions of itself after the initial checks?

A. Injection
B. Missing function-level access control
C. Cross-site request forgery
D. Cross-site scripting

Reveal Solution Discussion 3

Correct Answer: B 🗳️
It is imperative that an application perform checks when each function or portion of the application is accessed, to ensure that the user is properly authorized to access it. Without continual checks each time a function is accessed, an attacker could forge requests to access portions of the application where authorization has not been granted.

Question #9 Topic 1

Which of the following roles involves overseeing billing, purchasing, and requesting audit reports for an organization within a cloud environment?

A. Cloud service user
B. Cloud service business manager
C. Cloud service administrator
D. Cloud service integrator

Reveal Solution Discussion 5

Correct Answer: B 🗳️
The cloud service business manager is responsible for overseeing business and billing administration, purchasing cloud services, and requesting audit reports when necessary

Question #10 Topic 1

What is the biggest concern with hosting a key management system outside of the cloud environment?