Which security concept is based on preventing unauthorized access to data while also ensuring that it is accessible to those authorized to use it?
Answer(s): C
The main goal of confidentiality is to ensure that sensitive information is not made available or leaked to parties that should not have access to it, while at the same time ensuring that those with appropriate need and authorization to access it can do so in a manner commensurate with their needs and confidentiality requirements.
Which of the following is NOT a domain of the Cloud Controls Matrix (CCM)?
Answer(s): D
Budgetary and cost controls is not one of the domains outlined in the CCM.
Which security concept, if implemented correctly, will protect the data on a system, even if a malicious actor gains access to the actual system?
Answer(s): B
In any environment, data encryption is incredibly important to prevent unauthorized exposure of data either internally or externally. If a system is compromised by an attack, having the data encrypted on the system will prevent its unauthorized exposure or export, even with the system itself being exposed.
Which of the following is the sole responsibility of the cloud provider, regardless of which cloud model is used?
Regardless of which cloud-hosting model is used, the cloud provider always has sole responsibility for the physical environment.
Which of the following is NOT a factor that is part of a firewall configuration?
Answer(s): A
Firewalls take into account source IP, destination IP, the port the traffic is using, as well as the network protocol (UDP/TCP). Whether or not the traffic is encrypted is not something a firewall is concerned with.
Post your Comments and Discuss ISC CCSP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CCSP content, but please register or login to continue.