[2025年03月]更新のCCSP問題集には100%厳密検証された問題と解答で合格保証もしくは全額返金
合格させるISC CCSP試験には練習テスト問題集豪華お試しセット
質問 # 40
Countermeasures for protecting cloud operations against external attackers include all of the following except:
- A. Hardened devices and systems, including servers, hosts, hypervisors, and virtual machines.
- B. Continual monitoring for anomalous activity.
- C. Detailed and extensive background checks.
- D. Regular and detailed configuration/change management activities
正解：C
解説：
Explanation
Background checks are controls for attenuating potential threats from internal actors; external threats aren't likely to submit to background checks.
質問 # 41
Which of the following represents a control on the maximum amount of resources that a single customer, virtual machine, or application can consume within a cloud environment?
- A. Limit
- B. Provision
- C. Reservation
- D. Share
正解：A
解説：
Explanation
Limits are put in place to enforce a maximum on the amount of memory or processing a cloud customer can use. This can be done either on a virtual machine or as a comprehensive whole for a customer, and is meant to ensure that enormous cloud resources cannot be allocated or consumed by a single host or customer to the detriment of other hosts and customers.
質問 # 42
Although the United States does not have a single, comprehensive privacy and regulatory framework, a number of specific regulations pertain to types of data or populations.
Which of the following is NOT a regulatory system from the United States federal government?
- A. SOX
- B. PCI DSS
- C. HIPAA
- D. FISMA
正解：B
解説：
Explanation/Reference:
Explanation:
The Payment Card Industry Data Security Standard (PCI DSS) pertains to organizations that handle credit card transactions and is an industry-regulatory standard, not a governmental one. The Sarbanes-Oxley Act (SOX) was passed in 2002 and pertains to financial records and reporting, as well as transparency requirements for shareholders and other stakeholders. The Health Insurance Portability and Accountability Act (HIPAA) was passed in 1996 and pertains to data privacy and security for medical records. FISMA refers to the Federal Information Security Management Act of 2002 and pertains to the protection of all US federal government IT systems, with the exception of national security systems.
質問 # 43
Which of the following represents a prioritization of applications or cloud customers for the allocation of additional requested resources when there is a limitation on available resources?
- A. Provision
- B. Reservation
- C. Limit
- D. Share
正解：D
解説：
Explanation
The concept of shares within a cloud environment is used to mitigate and control the request for resource allocations from customers that the environment may not have the current capability to allow. Shares work by prioritizing hosts within a cloud environment through a weighting system that is defined by the cloud provider.
When periods of high utilization and allocation are reached, the system automatically uses scoring of each host based on its share value to determine which hosts get access to the limited resources still available. The higher the value a particular host has, the more resources it will be allowed to utilize.
質問 # 44
Many tools and technologies are available for securing or monitoring data in transit within a data center, whether it is a traditional data center or a cloud.
Which of the following is NOT a technology for securing data in transit?
- A. VPN
- B. HTTPS
- C. TLS
- D. DNSSEC
正解：D
解説：
DNSSEC is an extension of the normal DNS protocol that enables a system to verify the integrity of a DNS query resolution by signing it from the authoritative source and verifying the signing chain. It is not used for securing data transmissions or exchanges. HTTPS is the most common method for securing web service and data calls within a cloud, and TLS is the current standard for encrypting HTTPS traffic. VPNs are widely used for securing data transmissions and service access.
質問 # 45
Cryptographic keys for encrypted data stored in the cloud should be ______________.
Response:
- A. Generated with redundancy
- B. Not stored with the cloud provider
- C. At least 128 bits long
- D. Split into groups
正解：B
質問 # 46
When using an IaaS solution, what is the capability provided to the customer?
- A. To provision processing, storage, networks, and other fundamental computing resources when the auditor is able to deploy and run arbitrary software, which can include OSs and applications.
- B. To provision processing, storage, networks, and other fundamental computing resources when the consumer is able to deploy and run arbitrary software, which can include OSs and applications.
- C. To provision processing, storage, networks, and other fundamental computing resources when the provider is able to deploy and run arbitrary software, which can include OSs and applications.
- D. To provision processing, storage, networks, and other fundamental computing resources when the consumer is not able to deploy and run arbitrary software, which can include OSs and applications.
正解：B
解説：
Explanation/Reference:
Explanation:
According to "The NIST Definition of Cloud Computing," in IaaS, "the capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, and deployed applications; and possibly limited control of select networking components (e.g., host firewalls).
質問 # 47
What is a cloud storage architecture that manages the data in caches of copied content close to locations of high demand?
- A. Database
- B. CDN
- C. File-based storage
- D. Object-based storage
正解：B
質問 # 48
Which of the following is NOT a domain of the Cloud Controls Matrix (CCM)?
- A. Budgetary and cost controls
- B. Human resources
- C. Data center security
- D. Mobile security
正解：A
解説：
Explanation
Budgetary and cost controls is not one of the domains outlined in the CCM.
質問 # 49
What expectation of data custodians is made much more challenging by a cloud implementation, especially with PaaS or SaaS?
- A. Data classification
- B. Knowledge of systems
- C. Access to data
- D. Encryption requirements
正解：B
解説：
Explanation
Under the Federal Rules of Civil Procedure, data custodians are assumed and expected to have full and comprehensive knowledge of the internal design and architecture of their systems. In a cloud environment, especially with PaaS and SaaS, it is impossible for the data custodian to have this knowledge because those systems are controlled by the cloud provider and protected as proprietary knowledge.
質問 # 50
Which of the cloud deployment models is used by popular services such as iCloud, Dropbox, and OneDrive?
- A. Community
- B. Hybrid
- C. Public
- D. Private
正解：C
解説：
Explanation
Popular services such as iCloud, Dropbox, and OneDrive are all publicly available and are open to any user for free, with possible add-on services offered for a cost.
質問 # 51
Although encryption can help an organization to effectively decrease the possibility of data breaches, which other type of threat can it increase the chances of?
- A. Insecure interfaces
- B. Data loss
- C. System vulnerabilities
- D. Account hijacking
正解：B
質問 # 52
What is the intellectual property protection for a useful manufacturing innovation?
- A. Copyright
- B. Trade secret
- C. Trademark
- D. patent
正解：D
解説：
Explanation
Patents protect processes (as well as inventions, new plantlife, and decorative patterns). The other answers listed are answers to other questions.
質問 # 53
When a data center is configured such that the backs of the devices face each other and the ambient temperature in the work area is cool, it is called ___________.
- A. HVAC modulated
- B. Cold aisle containment
- C. Hot aisle containment
- D. Thermo-optimized
正解：C
質問 # 54
What is the cloud service model in which the customer is responsible for administration of the OS?
- A. SaaS
- B. PaaS
- C. QaaS
- D. IaaS
正解：D
解説：
In IaaS, the cloud provider only owns the hardware and supplies the utilities. The customer is responsible for the OS, programs, and data. In PaaS and SaaS, the provider also owns the OS.
There is no QaaS.
That is a red herring.
質問 # 55
Which publication from the United States National Institute of Standards and Technology pertains to defining cloud concepts and definitions for the various core components of cloud computing?
- A. SP 800-153
- B. SP 800-53
- C. SP 800-40
- D. SP 800-145
正解：D
解説：
NIST Special Publications 800-145 is titled "The NIST Definition of Cloud Computing" and contains definitions and explanations of core cloud concepts and components.
質問 # 56
......
2025年最新の有効なCCSPテスト解答ISC試験PDF：https://www.jpntest.com/shiken/CCSP-mondaishu
無料ISC CCSP試験問題と解答トレーニングにはJPNTest：https://drive.google.com/open?id=1T4EDuj_r3JyJhSIUhdXbWDVnIBW7XkvM