2025年最新の更新のISC Cloud Securityが有効なCCSP問題集を無料提供しています
最新のJPNTest CCSPPDF問題集をダウンロードしちゃおう：https://www.jpntest.com/shiken/CCSP-mondaishu（827問題と解答)
ISC CCSP（Certified Cloud Security Professional）試験は、クラウドセキュリティに関する専門知識を証明したいプロフェッショナルを対象とした、世界的に認められた認定プログラムです。この認定プログラムは、クラウド環境でデータ、アプリケーション、インフラストラクチャを効果的に設計、管理、保護するために必要なスキルと知識を検証することを意図しています。この認定プログラムは、情報セキュリティとサイバーセキュリティの教育と認定を提供する世界的なリーディング組織である国際情報システムセキュリティ認定コンソーシアム（ISC）2によって提供されています。
質問 # 281
Which is the most commonly used standard for information exchange within a federated identity system?
Response:
- A. WS-Federation
- B. SAML
- C. OpenID
- D. OAuth
正解：B
質問 # 282
A truly airgapped machine selector will ____________.
Response:
- A. Not be portable
- B. Have total Faraday properties
- C. Terminate a connection before creating a new connection
- D. Be made of composites and not metal
正解：C
質問 # 283
Which of the following are not examples of personnel controls?
Response:
- A. Reference checks
- B. Background checks
- C. Continuous security training
- D. Strict access control mechanisms
正解：D
質問 # 284
Your boss has tasked your team with getting your legacy systems and applications connected with new cloud-based services that management has decided are crucial to customer service and offerings.
Which role would you be assuming under this directive?
- A. Cloud service integrator
- B. Cloud service user
- C. Cloud service business manager
- D. Cloud service administrator
正解：A
解説：
Explanation/Reference:
Explanation:
The cloud service integrator role is responsible for connecting and integrating existing services and applications with cloud-based services.A cloud service administrator is responsible for testing, monitoring, and securing cloud services, as well as providing usage reporting and dealing with service problems. The cloud service user is someone who consumes cloud services. The cloud service business manager is responsible for overseeing the billing, auditing, and purchasing of cloud services.
質問 # 285
Which of the following is NOT a common component of a DLP implementation process?
- A. Discovery
- B. Enforcement
- C. Monitoring
- D. Revision
正解：D
質問 # 286
In the cloud motif, the data owner is usually:
- A. The cloud access security broker
- B. The cloud provider
- C. In another jurisdiction
- D. The cloud customer
正解：D
解説：
Explanation/Reference:
Explanation:
The data owner is usually considered the cloud customer in a cloud configuration; the data in question is the customer's information, being processed in the cloud. The cloud provider is only leasing services and hardware to the customer. The cloud access security broker (CASB) only handles access control on behalf of the cloud customer, and is not in direct contact with the production data.
質問 # 287
Which of the following best describes data masking?
- A. A method where the last few numbers in a dataset are not obscured. These are often used for authentication.
- B. Data masking involves stripping out all digits in a string of numbers so as to obscure the original number.
- C. A method used to protect prying eyes from data such as social security numbers and credit card data.
- D. A method for creating similar but inauthentic datasets used for software testing and user training.
正解：D
解説：
Explanation/Reference:
Explanation:
All of these answers are actually correct, but A is the best answer, because it is the most general, includes the others, and is therefore the optimum choice. This is a good example of the type of question that can appear on the actual exam.
質問 # 288
Which of the following best describes SAML?
Response:
- A. A standard for exchanging authentication and authorization data between security domains
- B. A standard for exchanging usernames and passwords across devices
- C. A standard for developing secure application management logistics
- D. A standard used for directory synchronization
正解：A
質問 # 289
What must SOAP rely on for security since it does not provide security as a built-in capability?
- A. Encryption
- B. Tokenization
- C. TLS
- D. SSL
正解：A
解説：
Explanation/Reference:
Explanation:
Simple Object Access Protocol (SOAP) uses Extensible Markup Language (XML) for data passing, and it must rely on the encryption of those data packages for security. TLS and SSL (before it was deprecated) represent two commons approaches to using encryption for protection of data transmissions. However, they are only two possible options and do not encapsulate the overall concept the question is looking for.
Tokenization, which involves the replacement of sensitive data with opaque values, would not be appropriate for use with SOAP because the actual data is needed by the services.
質問 # 290
Your new CISO is placing increased importance and focus on regulatory compliance as your applications and systems move into cloud environments.
Which of the following would NOT be a major focus of yours as you develop a project plan to focus on regulatory compliance?
- A. Data in transit
- B. Data in use
- C. Data custodian
- D. Data at rest
正解：C
解説：
Explanation
The jurisdictions where data is being stored, processed, or consumed are the ones that dictate the regulatory frameworks and compliance requirements, regardless of who the data owner or custodian might be. The other concepts for protecting data would all play a prominent role in regulatory compliance with a move to the cloud environment. Each concept needs to be evaluated based on the new configurations as well as any potential changes in jurisdiction or requirements introduced with the move to a cloud.
質問 # 291
Data labels could include all the following, except:
- A. Data of scheduled destruction
- B. Data owner
- C. Date data was created
- D. Data value
正解：D
解説：
All the others might be included in data labels, but we don't usually include data value, since it is prone to change frequently, and because it might not be information we want to disclose to anyone who does not have need to know.
質問 # 292
What is the primary reason that makes resolving jurisdictional conflicts complicated?
- A. Different technology standards
- B. Language barriers
- C. Lack of international authority
- D. Costs
正解：C
解説：
Explanation/Reference:
Explanation:
With international operations, systems ultimately cross many jurisdictional boundaries, and many times, they conflict with each other. The major hurdle to overcome for an organization is the lack of an ultimate international authority to mediate such conflicts, with a likely result of legal efforts in each jurisdiction.
質問 # 293
Which characteristic of automated patching makes it attractive?
Response:
- A. Cost
- B. Noise reduction
- C. Capability to recognize problems quickly
- D. Speed
正解：D
質問 # 294
What is one of the benefits of implementing an egress monitoring solution?
Response:
- A. Inventorying data assets
- B. Protecting against natural disasters
- C. Preventing DDoS attacks
- D. Interviewing data owners
正解：A
質問 # 295
Which of the following is considered an administrative control?
- A. Access control process
- B. Door locks
- C. Biometric authentication
- D. Keystroke logging
正解：A
質問 # 296
Which strategy involves using a fake production system to lure attackers in order to learn about their tactics?
Response:
- A. IPS
- B. IDS
- C. Firewall
- D. Honeypot
正解：D
質問 # 297
Which of the following roles is responsible for gathering metrics on cloud services and managing cloud deployments and the deployment processes?
- A. Cloud service operations manager
- B. Cloud service manager
- C. Cloud service business manager
- D. Cloud service deployment manager
正解：D
解説：
Explanation
Explanation:
The cloud service deployment manager is responsible for gathering metrics on cloud services, managing cloud deployments and the deployment process, and defining the environments and processes.
質問 # 298
......
実験された試験材料はCCSP：https://www.jpntest.com/shiken/CCSP-mondaishu
最新CCSPリアル試験問題をフォローせよ！：https://drive.google.com/open?id=1OzicmpRFwEbDtPM67QdBVBFax66sSqwq