CCSP Free Practice Test

- (Exam Topic 2)
Which of the following is not one of the types of controls? Response:

1. A. Transitional
2. B. Administrative
3. C. Technical
4. D. Physical

Correct Answer: A

- (Exam Topic 2)
Which type of threat is often used in conjunction with phishing attempts and is often viewed as greatly increasing the likeliness of success?
Response:

1. A. Unvalidated redirects and forwards
2. B. Cross-site request forgery
3. C. Cross-site scripting
4. D. Insecure direct object references

Correct Answer: A

- (Exam Topic 2)
Which of the following is not a feature of SAST? Response:

1. A. Source code review
2. B. Team-building efforts
3. C. “White-box” testing
4. D. Highly skilled, often expensive outside consultants

Correct Answer: B

- (Exam Topic 1)
At which layer does the IPSec protocol operate to encrypt and protect communications between two parties? Response:

1. A. Network
2. B. Application
3. C. Transport
4. D. Data link

Correct Answer: A