[2022年最新] 最高のCCSP試験問題集を使って- 実際の試験問題と解答を解こう
テストエンジンを練習してCCSPテスト問題
ISC CCSP 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
質問 25
What process is used within a clustered system to provide high availability and load balancing?
- A. Dynamic clustering
- B. Dynamic resource scheduling
- C. Dynamic optimization
- D. Dynamic balancing
正解: B
解説:
Dynamic resource scheduling (DRS) is used within all clustering systems as the method for clusters to provide high availability, scaling, management, and workload distribution and balancing of jobs and processes. From a physical infrastructure perspective, DRS is used to balance compute loads between physical hosts in a cloud to maintain the desired thresholds and limits on the physical hosts.
質問 26
You are the security policy lead for your organization, which is considering migrating from your on-premises, legacy environment into the cloud. You are reviewing the Cloud Security Alliance Cloud Controls Matrix (CSA CCM) as a tool for your organization.
What is probably the best benefit offered by the CCM?
Response:
- A. Simplicity of control selection from the list of approved choices
- B. Allowing your organization to leverage existing controls across multiple frameworks so as not to duplicate effort
- C. The low cost of the tool
- D. Ease of implementation by choosing controls from the list of qualified vendors
正解: B
質問 27
Which of the following technologies is used to monitor network traffic and notify if any potential threats or attacks are noticed?
- A. IDS
- B. Firewall
- C. IPS
- D. WAF
正解: A
解説:
An intrusion detection system (IDS) is designed to analyze network packets, compare their contents or characteristics against a set of configurations or signatures, and alert personnel if anything is detected that could constitute a threat or is otherwise designated for alerting.
質問 28
Which of the following roles is responsible for peering with other cloud services and providers?
- A. Inter-cloud provider
- B. Cloud service developer
- C. Cloud auditor
- D. Cloud service broker
正解: A
解説:
Explanation
The inter-cloud provider is responsible for peering with other cloud services and providers, as well as overseeing and managing federations and federated services.
質問 29
Cloud systems are increasingly used for BCDR solutions for organizations.
What aspect of cloud computing makes their use for BCDR the most attractive?
- A. Measured service
- B. Broad network access
- C. On-demand self-service
- D. Portability
正解: A
解説:
Explanation
Business continuity and disaster recovery (BCDR) solutions largely sit idle until they are actually needed. This traditionally has led to increased costs for an organization because physical hardware must be purchased and operational but is not used. By using a cloud system, an organization will only pay for systems when they are being used and only for the duration of use, thus eliminating the need for extra hardware and costs. Portability is the ability to easily move services among different cloud providers. Broad network access allows access to users and staff from anywhere and from different clients, and although this would be important for a BCDR situation, it is not the best answer in this case. On-demand self-service allows users to provision services automatically and when needed, and although this too would be important for BCDR situations, it is not the best answer because it does not address costs or the biggest benefits to an organization.
質問 30
Which of the following is NOT an application or utility to apply and enforce baselines on a system?
- A. GitHub
- B. Chef
- C. Puppet
- D. Active Directory
正解: A
解説:
GitHub is an application for code collaboration, including versioning and branching of code trees.
It is not used for applying or maintaining system configurations.
質問 31
Which of the following is not a component of contractual PII?
- A. Use of subcontractors
- B. Value of data
- C. Scope of processing
- D. Location of data
正解: D
解説:
The value of data itself has nothing to do with it being considered a part of contractual
質問 32
Which value refers to the amount of time it takes to recover operations in a BCDR situation to meet management's objectives?
- A. RPO
- B. RSL
- C. RTO
- D. SRE
正解: C
解説:
The recovery time objective (RTO) is a measure of the amount of time it would take to recover operations in the event of a disaster to the point where management's objectives are met for BCDR.
質問 33
Which type of audit report does many cloud providers use to instill confidence in their policies, practices, and procedures to current and potential customers?
- A. SOC 2
- B. SAS-70
- C. SOC 1
- D. SOX
正解: A
解説:
One approach that many cloud providers opt to take is to undergo a SOC 2 audit and make the report available to cloud customers and potential cloud customers as a way of providing security confidence without having to open their systems or sensitive information to the masses.
質問 34
If a cloud computing customer wishes to guarantee that a minimum level of resources will always be available, which of the following set of services would compromise the reservation?
- A. Memory and networking
- B. CPU and storage
- C. CPU and memory
- D. CPU and software
正解: C
解説:
Explanation/Reference:
Explanation:
A reservation guarantees to a cloud customer that they will have access to a minimal level of resources to run their systems, which will help mitigate against DoS attacks or systems that consume high levels of resources. A reservation pertains to memory and CPU resources. Under the concept of a reservation, memory and CPU are the guaranteed resources, but storage and networking are not included even though they are core components of cloud computing. Software would be out of scope for a guarantee and doesn't really pertain to the concept.
質問 35
Upon completing a risk analysis, a company has four different approaches to addressing risk. Which approach it takes will be based on costs, available options, and adherence to any regulatory requirements from independent audits.
Which of the following groupings correctly represents the four possible approaches?
- A. Accept, deny, transfer, mitigate
- B. Accept, deny, mitigate, revise
- C. Accept, dismiss, transfer, mitigate
- D. Accept, avoid, transfer, mitigate
正解: D
解説:
The four possible approaches to risk are as follows: accept (do not patch and continue with the risk), avoid (implement solutions to prevent the risk from occurring), transfer (take out insurance), and mitigate (change configurations or patch to resolve the risk). Each of these answers contains at least one incorrect approach name.
質問 36
Which of the following is the biggest concern or challenge with using encryption?
- A. Cipher strength
- B. Dependence on keys
- C. Protocol standards
- D. Efficiency
正解: B
解説:
Explanation/Reference:
Explanation:
No matter what kind of application, system, or hosting model used, encryption is 100 percent dependent on encryption keys. Properly securing the keys and the exchange of them is the biggest and most important challenge of encryption systems.
質問 37
A UPS should have enough power to last how long?
- A. One day
- B. 12 hours
- C. 10 minutes
- D. Long enough for graceful shutdown
正解: D
質問 38
Which phase of the cloud data lifecycle would be the MOST appropriate for the use of DLP technologies to protect the data?
- A. Create
- B. Store
- C. Use
- D. Share
正解: D
解説:
Explanation
During the share phase, data is allowed to leave the application for consumption by other vendors, systems, or services. At this point, as the data is leaving the security controls of the application, the use of DLP technologies is appropriate to control how the data is used or to force expiration. During the use, create, and store phases, traditional security controls are available and are more appropriate because the data is still internal to the application.
質問 39
A crucial decision any company must make is in regard to where it hosts the data systems it depends on.
A debate exists as to whether it's best to lease space in a data center or build your own data center--and now with cloud computing, whether to purchase resources within a cloud.
What is the biggest advantage to leasing space in a data center versus procuring cloud services?
- A. Security
- B. Control
- C. Costs
- D. Regulations
正解: B
解説:
Explanation/Reference:
Explanation:
When leasing space in a data center versus utilizing cloud services, a customer has a much greater control over its systems and services, from both the hardware/software perspective and the operational management perspective. Costs, regulations, and security are all prime considerations regardless of the hosting type selected. Although regulations will be the same in either hosting solution, in most instances, costs and security will be greater factors with leased space.
質問 40
......
CCSP実際の問題アンサーPDFには100%カバー率リアルな試験問題：https://www.jpntest.com/shiken/CCSP-mondaishu
CCSPリアルな試験問題テストエンジン問題集トレーニング830問題：https://drive.google.com/open?id=1GN0Jpx87mMh1HpftQRz12D7OAPitZFMX