Which of the cloud deployment models involves spanning multiple cloud environments or a mix of cloud hosting models?
Answer(s): C
A hybrid cloud model involves the use of more than one type of cloud hosting models, typically the mix of private and public cloud hosting models.
Which of the following is NOT one of five principles of SOC Type 2 audits?
The SOC Type 2 audits include five principles: security, privacy, processing integrity, availability, and confidentiality.
Which aspect of cloud computing makes data classification even more vital than in a traditional data center?
With multiple tenants within the same hosting environment, any failure to properly classify data may lead to potential exposure to other customers and applications within the same environment.
What concept does the "T" represent in the STRIDE threat model?
Any application that sends data to the user will face the potential that the user could manipulate or alter the data, whether it resides in cookies, GET or POST commands, or headers, or manipulates client-side validations. If the user receives data from the application, it is crucial that the application validate and verify any data that is received back from the user.
Which of the following would be a reason to undertake a BCDR test?
Answer(s): A
Any time a major functional change of an application occurs, a new BCDR test should be done to ensure the overall strategy and process are still applicable and appropriate.
Post your Comments and Discuss ISC CCSP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CCSP content, but please register or login to continue.