CCSP Dumps

CCSP Free Practice Test

ISC2 CCSP: Certified Cloud Security Professional

QUESTION 86

- (Exam Topic 3)
Which aspect of SaaS will alleviate much of the time and energy organizations spend on compliance (specifically baselines)?

Correct Answer: C
With the entire software platform being controlled by the cloud provider, the standardization of configurations and versioning is done automatically for the cloud customer. This alleviates the customer's need to track upgrades and releases for its own systems and development; instead, the onus is on the cloud provider.
Although licensing is the responsibility of the cloud customer within SaaS, it does not have an impact on compliance requirements. Within SaaS, development and maintenance of the system are solely the responsibility of the cloud provider.

QUESTION 87

- (Exam Topic 4)
Which component of ITIL involves the creation of an RFC ticket and obtaining official approvals for it?

Correct Answer: D
The change management process involves the creation of the official Request for Change (RFC) ticket, which is used to document the change, obtain the required approvals from management and stakeholders, and track the change to completion. Release management is a subcomponent of change management, where the actual code or configuration change is put into place. Deployment management is similar to release management, but it's where changes are actually implemented on systems. Problem management is focused on the identification and mitigation of known problems and deficiencies before they are able to occur.

QUESTION 88

- (Exam Topic 2)
Which security concept, if implemented correctly, will protect the data on a system, even if a malicious actor gains access to the actual system?

Correct Answer: B
In any environment, data encryption is incredibly important to prevent unauthorized exposure of data either internally or externally. If a system is compromised by an attack, having the data encrypted on the system will prevent its unauthorized exposure or export, even with the system itself being exposed.

QUESTION 89

- (Exam Topic 2)
Which of the following service capabilities gives the cloud customer the most control over resources and configurations?

Correct Answer: C
The infrastructure service capability gives the cloud customer substantial control in provisioning and configuring resources, including processing, storage, and network resources.

QUESTION 90

- (Exam Topic 1)
What does SDN stand for within a cloud environment?

Correct Answer: B
Software-defined networking separates the administration of network filtering and network forwarding to allow for distributed administration.