CCSP Practice Test

CCSP Practice Test practice questions, page 10 of 21, with answer review and explanations.

Question 46

Which of the following threat types involves the sending of untrusted data to a user's browser to be executed with their own credentials and access?

  1. Missing function level access control
  2. Cross-site scripting
  3. Cross-site request forgery
  4. Injection

Question 47

How is an object stored within an object storage system?

  1. Key value
  2. Database
  3. LDAP
  4. Tree structure

Question 48

Which of the following is NOT a regulatory system from the United States federal government?

  1. PCI DSS
  2. FISMA
  3. SOX
  4. HIPAA

Question 49

Which jurisdiction lacks specific and comprehensive privacy laws at a national or top level of legal authority?

  1. European Union
  2. Germany
  3. Russia
  4. United States

Question 50

Which United States law is focused on PII as it relates to the financial industry?

  1. HIPAA
  2. SOX
  3. Safe Harbor
  4. GLBA