CCSP Practice Test

CCSP Practice Test practice questions, page 11 of 21, with answer review and explanations.

Question 51

Which of the following threat types can occur when encryption is not properly applied or insecure transport mechanisms are used?

  1. Security misconfiguration
  2. Insecure direct object references
  3. Sensitive data exposure
  4. Unvalidated redirects and forwards

Question 52

What is the best approach for dealing with services or utilities that are installed on a system but not needed to perform their desired function?

  1. Remove
  2. Monitor
  3. Disable
  4. Stop

Question 53

Which of the following actions will NOT make data part of the "create" phase of the cloud data lifecycle?

  1. Modifying metadata
  2. Importing data
  3. Modifying data
  4. Constructing new data

Question 54

What are the two protocols that TLS uses?

  1. Handshake and record
  2. Transport and initiate
  3. Handshake and transport
  4. Record and transmit

Question 55

Which type of cloud model typically presents the most challenges to a cloud customer during the "destroy" phase of the cloud data lifecycle?

  1. IaaS
  2. DaaS
  3. SaaS
  4. PaaS