CCSP Free Practice Test

- (Exam Topic 2)
In a Lightweight Directory Access Protocol (LDAP) environment, each entry in a directory server is identified by a ______.
Response:

1. A. Domain name (DN)
2. B. Distinguished name (DN)
3. C. Directory name (DN)
4. D. Default name (DN)

Correct Answer: B

- (Exam Topic 3)
Bob is staging an attack against Alice’s website. He is able to embed a link on her site that will execute malicious code on a visitor’s machine, if the visitor clicks on the link. This is an example of which type of attack?
Response:

1. A. Cross-site scripting
2. B. Broken authentication/session management
3. C. Security misconfiguration
4. D. Insecure cryptographic storage

Correct Answer: A

- (Exam Topic 2)
Which type of cloud service category would having a vendor-neutral encryption scheme for data at rest (DAR) be the MOST important?
Response:

1. A. Public
2. B. Hybrid
3. C. Private
4. D. Community

Correct Answer: B

- (Exam Topic 3)
Which is the most commonly used standard for information exchange within a federated identity system? Response:

1. A. OAuth
2. B. OpenID
3. C. SAML
4. D. WS-Federation

Correct Answer: C

- (Exam Topic 2)
In a cloud environment, encryption should be used for all the following, except: Response:

1. A. Long-term storage of data
2. B. Near-term storage of virtualized images
3. C. Secure sessions/VPN
4. D. Profile formatting

Correct Answer: D