CCSP 試験練習問題

C

Correct answer: Shadow IT In cloud computing, on-demand self-service is the ability for cloud customers to add, configure, and provision a new cloud service without ever needing to interact with the cloud provider. This is usually done through a web portal and is an integral component of the pay-as-you-go cloud billing model. This ease of use has the downside of shadow IT. Shadow IT is the use of unauthorized software within an organization. Because users can quickly access cloud resources with on-demand self-service, users can quickly provision unauthorized software and create shadow IT. Resource pooling is a part of the virtualization capability created by hypervisors. The hypervisor abstracts the hardware capabilities of the physical server so that it can be dynamically allocated to virtual machines. This includes CPU, memory, storage, and network capability. Multi-tenancy is another characteristic of cloud computing. With multi-tenancy, multiple users or organizations (tenants) share the same infrastructure. The use of default passwords is not directly related to on-demand self-service.(ISC)² CCSP Certified Cloud Security Professional Official Study Guide, 3rd Edition. Pg 4. The Official (ISC)² CCSP CBK Reference, 4th Edition. Pg 7-8.

A

Correct answer: Network security group A Network Security Group (NSG) protects a group of cloud resources. It provides a set of security rules or virtual firewall for those resources. This gives the customer additional control over security. A cloud gateway adds an additional layer of security by transferring data between the customer and the CSP away from the public internet. Contextual-based security leverages contextual information such as identification to assist in securing cloud resources. External access attempts from the public internet can be blocked by ingress controls. Egress controls are a technique for preventing internal resources from connecting to unauthorized and potentially harmful websites.(ISC)² CCSP Certified Cloud Security Professional Official Study Guide, 3rd Edition. Pg 126. The Official (ISC)² CCSP CBK Reference, 4th Edition. Pg 209-210.

C

Correct answer: Reversibility Some important cloud considerations have to do with its effects on operations. These include:(ISC)2 CCSP Certified Cloud Security Professional Official Study Guide, 3rd Edition. Pg 20-22. The Official (ISC)² CCSP CBK Reference, 4th Edition. Pg 21-27.

A

Correct answer: Cloud Service Partner A cloud service partner is a third-party provider of cloud-based services (infrastructure, storage and application, and platform services) through the CSP with which it is associated. The third-party cloud service partner makes use of the cloud service provider's service in this scenario. The CSC is considered party one. The CSP is considered party two. A Cloud Service Partner, cloud service broker, or an external auditor is considered the third party. And, while we are here, if you see a fourth party, they will be a contractor. The Official (ISC)² CCSP CBK Reference, 4th Edition. Pg 4. (ISC)² CCSP Certified Cloud Security Professional Official Study Guide, 3rd Edition. Pg 15-16.

C

Correct answer: Tags Tags are pervasive in cloud deployments. A plan must be built for the corporation on how to tag assets. If it is not done consistently, it is not helpful. A tag is made up of two pieces, a key and a value. For example, in the tag "cert:CCSP," "cert" is the key, and "CSSP" is the value. Tags are also sometimes called " labels" (e.g., in Kubernetes) A datatype is a data categorization. Tags are technically a type of identifier. However, an identifier is too generic of an answer in this case. Practical Cloud Security: A Guide for Secure Design and Deployment, 2nd Edition. Pg 22.