Which of the following statements accurately describes VLANs?
Answer(s): A
A virtual area network (VLAN) can span any networks within a data center, or it can span across different physical locations and data centers.
What must be secured on physical hardware to prevent unauthorized access to systems?
BIOS is the firmware that governs the physical initiation and boot up of a piece of hardware. If it is compromised, an attacker could have access to hosted systems and make configurations changes to expose or disable some security elements on the system.
What type of PII is regulated based on the type of application or per the conditions of the specific hosting agreement?
Answer(s): B
Contractual PII has specific requirements for the handling of sensitive and personal information, as defined at a contractual level. These specific requirements will typically document the required handling procedures and policies to deal with PII. They may be in specific security controls and configurations, required policies or procedures, or limitations on who may gain authorized access to data and systems.
Which of the following security technologies is commonly used to give administrators access into trust zones within an environment?
Virtual private networks (VPNs) are commonly used to allow access into trust zones. Via a VPN, access can be controlled and logged and only allowed through secure channels by authorized users. It also adds an additional layer of encryption and protection to communications.
Which concept BEST describes the capability for a cloud environment to automatically scale a system or application, based on its current resource demands?
Answer(s): D
Rapid elasticity allows a cloud environment to automatically add or remove resources to or from a system or application based on its current demands. Whereas a traditional data center model would require standby hardware and substantial effort to add resources in response to load increases, a cloud environment can easily and rapidly expand to meet resources demands, so long as the application is properly implemented for it.
Post your Comments and Discuss ISC CCSP exam prep with other Community members: