Free CCSP Exam Braindumps
Certified Cloud Security Professional (CCSP) Questions 156–160 (page: 33)

Updated On: 10-Feb-2026

What type of security threat is DNSSEC designed to prevent?

  1. Account hijacking
  2. Snooping
  3. Spoofing
  4. Injection

Answer(s): C

Explanation:

DNSSEC is designed to prevent the spoofing and redirection of DNS resolutions to rogue sites.



Which European Union directive pertains to personal data privacy and an individual's control over their personal data?

  1. 99/9/EC
  2. 95/46/EC
  3. 2000/1/EC
  4. 2013/27001/EC

Answer(s): B

Explanation:

Directive 95/46/EC is titled "On the protection of individuals with regard to the processing of personal data and on the free movement of such data."



Which of the cloud cross-cutting aspects relates to the requirements placed on a system or application by law, policy, or requirements from standards?

  1. regulatory requirements
  2. Auditability
  3. Service-level agreements
  4. Governance

Answer(s): A

Explanation:

Regulatory requirements are those imposed upon businesses and their operations either by law, regulation, policy, or standards and guidelines. These requirements are specific either to the locality in which the company or application is based or to the specific nature of the data and transactions conducted.



Which data point that auditors always desire is very difficult to provide within a cloud environment?

  1. Access policy
  2. Systems architecture
  3. Baselines
  4. Privacy statement

Answer(s): B

Explanation:

Cloud environments are constantly changing and often span multiple physical locations. A cloud customer is also very unlikely to have knowledge and insight into the underlying systems architecture in a cloud environment. Both of these realities make it very difficult, if not impossible, for an organization to provide a comprehensive systems design document.



What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?

  1. Proxy
  2. Bastion
  3. Honeypot
  4. WAF

Answer(s): B

Explanation:

A bastion host is a server that is fully exposed to the public Internet, but is extremely hardened to prevent attacks and is usually dedicated for a specific application or usage; it is not something that will serve multiple purposes. This singular focus allows for much more stringent security hardening and monitoring.



Viewing page 33 of 104
Viewing questions 161 - 165 out of 512 questions


Post your Comments and Discuss ISC CCSP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!