Free Certified Cloud Security Professional (CCSP) CCSP Exam Practice Test

Which aspect of cloud computing pertains to cloud customers only paying for the resources and services they actually use?

• Metered service
  
• Measured billing
  
• Metered billing
  
• Measured service
  

Which of the cloud cross-cutting aspects relates to the ability for a cloud customer to easily remove their applications and data from a cloud environment?

• Reversibility
  
• Availability
  
• Portability
  
• Interoperability
  

Which of the cloud cross-cutting aspects relates to the ability to reuse or move components of an application or service?

• Availability
  
• Interoperability
  
• Reversibility
  
• Portability
  

Which of the following can be useful for protecting cloud customers from a denial-of-service (DoS) attack against another customer hosted in the same cloud?

• Reservations
  
• Measured service
  
• Limits
  
• Shares
  

With an application hosted in a cloud environment, who could be the recipient of an eDiscovery order?

• Users
  
• Both the cloud provider and cloud customer
  
• The cloud customer
  
• The cloud provider
  

What does static application security testing (SAST) offer as a tool to the testers that makes it unique compared to other common security testing methodologies?

• Live testing
  
• Source code access
  
• Production system scanning
  
• Injection attempts
  

There is a large gap between the privacy laws of the United States and those of the European Union. Bridging this gap is necessary for American companies to do business with European companies and in European markets in many situations, as the American companies are required to comply with the stricter requirements.Which US program was designed to help companies overcome these differences?

• SOX
  
• HIPAA
  
• GLBA
  
• Safe Harbor
  

Many different common threats exist against web-exposed services and applications. One attack involves attempting to leverage input fields to execute queries in a nested fashion that is unintended by the developers.What type of attack is this?

• Injection
  
• Missing function-level access control
  
• Cross-site scripting
  
• Cross-site request forgery
  

Which of the following storage types is most closely associated with a database-type storage implementation?

• Object
  
• Unstructured
  
• Volume
  
• Structured
  

Which of the following methods of addressing risk is most associated with insurance?

• Mitigation
  
• Transference
  
• Avoidance
  
• Acceptance