CCSP Quiz - Domain One

Bob has written an application in Python. He is considering to move from a self-hosted python environment to one where he will run his application in servers managed by a cloud provider. What type of cloud solution is Bob considering?

• Infrastructure as a Service (IaaS)

• Platform as a Service (PaaS)

• Software as a Service (SaaS)

• Hosting as a Service (HaaS)

Which cloud model gives responsibility for the physical environment to the cloud customer?

• IaaS

• PaaS

• SaaS

• None

Why is prevention alone not sufficient to protect a system from attackers?

• Even the best preventive measures experience failures

• Preventive measure maintenance is labor-intensive

• Preventive measures could interfere with normal business operations

• Prevention by itself is an expensive alternative

Which of the following principles must always be included in a SOC 2 auditing report?

• Processing integrity

• Privacy

• Security

• Availability

Which of the following are attributes of cloud computing?

• Minimal management effort and shared resources

• High cost and unique resources

• Rapid provisioning and slow release of resources

• Limited access and service provider interaction

Which of the following is not a benefit of cloud computing?

• Increased productivity

• Greater mobility

• Increased data privacy

• Reduced expenditures

As a part of an audit, systems and processes are tested to evaluate whether they are in compliance with regulatory or organizational policy requirements. What is the official term for determining any discrepancies between the real and the desired states?

• Audit findings

• Gap analysis

• Audit deficiency

• Compliance analysis

In a SaaS model, who is responsible for application security?

• Cloud broker

• Cloud provider

• Cloud customer

• Both cloud provider and cloud customer

Data stored in the RAM is best characterized as _____

• Data-at-rest

• Data-in-transit

• Data-in-use

• Data-in-motion

What is the correct sequence for performing a cloud audit?

• Define objectives, define scope, conduct audit, lessons learned

• Define scope, conduct audit, prepare report, and remediate findings

• Conduct audit, prepare report, remediate findings, and verify remediation

• Define objectives, conduct audit, prepare report, get management approval