stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CCSP Archtecture and Design Concepts Flashcards | StudBud
Explore
/
CCSP Archtecture and Design Concepts
CCSP Archtecture and Design Concepts
25 terms
·
StudBud Administration
·
3 plays
Domain 1 of CCSP
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
Which problem would make it least likely for CSC to easily move to other CSP?
Patching Cycles
Operating Systems
Data Lock-in
Insecure API
2
Which of the following are common threats to cloud computing platforms?
Data Breaches
Phishing Attacks
Cryptographic Hashing
Denial of service
3
Which method is used to ensure data removal from cloud is not recoverable?
Overwriting
Deguassing
Deletion
Shredding
4
Which is
not
a concern of the CSC as part of PaaS?
Permissions
System Isolation
User Access
Insufficient Due Diligence
5
Which characteristic of cloud would be most attractive to management to save money?
Rapid Elasticity
On-demand Self-service
Resource Pooling
Measured Service
6
What certification would be appropriate for financial statement auditing?
ISO/IEC 27000
FIPS 140-2
SOC1, SOC2 and SOC3
NIST SP 800-53
7
NIST 500-293 Cloud Technology Roadmap is meant to be used by...
Government Services Administration
All Concerns
Public Corporations
Military
8
Which of these are
not
a concern of the CSP when using a SaaS model?
User Access
Data Storage
Load Balancing
High Avilability
9
When the CSC is thinking of using IaaS which of these should
not
be a concern?
Key Management
Capacity
Cost Control
Application Software
10
Which of these is
not
a feature of cross-cutting?
Interoperability
Multi tenancy
Portability
Service Level Agreements
11
Which hosting model would be best for a company to use multiple CSP for burst of heavy traffic?
Community
Private
Public
Hybrid
12
Which phase of the data lifecycle occurs immediately after the create phase?
Share
Use
Consume
Store
13
Which threat, which a CSC might not be aware of, could lead to $$ loss but
not
reputation loss?
Insufficient Due Diligence
Malicious Insiders
Denial of Service
Data Breaches
14
Which is
not
a part of the secure data Lifecycle?
Create
Share
Use
Delete
15
What is a benefit of private cloud versus other models?
Scalability
Right sizing
Disaster Recovery
Ownership
16
Which of these is not a key component of cloud computing?
Contained tenancy
rapid elasticity
Measured service
On demand self service
17
The best way to remove data from the cloud quickly is...
Crypto erasure
Deactivation
Sharding
Deletion
18
Which of these is a direct concern of the CSC when using IaaS?
Elaticity
Processing capacity
Data
Memory
19
Which component of the NIST roadmap sets requirements between the CSP and CSC?
Auditability
SLAs
Governance
Regulatory Requirements
20
Which hypervisor runs on top of an operating system?
Type 1
Type 2
Type 4
Type 3
21
Which component of NIST roadmap pertains to split up of apps and reuse?
Auditability
Availability
Interoperability
Portability
22
What benefit of IaaS would be most beneficial to a new company with limited capital?
High Availability
Physical Security Requirements
Hardware Cost
Scalability
23
Which standard is commonly applied to cloud security?
ISO/IEC 27003:2013
ISO/IEC 27013:2000
ISO/IEC 27001:2010
ISO/IEC 27001:2013
24
CSP stands for...
Cloud Systems Provider
Cloud Service Provider
Cloud Systems Partner
Cloud Service Partner
25
Which concept is most important for data security while being used by application?
Denial of Service
Data at Rest
Data in Transit
Malicious Insider
