What concept does the "R" represent with the DREAD model?
Answer(s): A
Reproducibility is the measure of how easy it is to reproduce and successful use an exploit. Scoring within the DREAD model ranges from 0, signifying a nearly impossibly exploit, up to 10, which signifies something that anyone from a simple function call could exploit, such as a URL.
The SOC Type 2 reports are divided into five principles.Which of the five principles must also be included when auditing any of the other four principles?
Answer(s): C
Under the SOC guidelines, when any of the four principles other than security are being audited, which includes availability, confidentiality, processing integrity, and privacy, the security principle must also be included with the audit.
How many additional DNS queries are needed when DNSSEC integrity checks are added?
Answer(s): B
DNSSEC does not require any additional DNS queries to be performed. The DNSSEC integrity checks and validations are all performed as part of the single DNS lookup resolution.
Which of the following is the sole responsibility of the cloud customer, regardless of which cloud model is used?
Regardless of which cloud-hosting model is used, the cloud customer always has sole responsibility for the governance of systems and data.
Which of the following service categories entails the least amount of support needed on the part of the cloud customer?
With SaaS providing a fully functioning application that is managed and maintained by the cloud provider, cloud customers incur the least amount of support responsibilities themselves of any service category.
Post your Comments and Discuss ISC CCSP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CCSP content, but please register or login to continue.