Question 1

Many different common threats exist against web-exposed services and applications. One attack involves

attempting to leverage input fields to execute queries in a nested fashion that is unintended by the developers.

What type of attack is this?

Options :

A : Injection

B : Missing function-level access control

C : Cross-site scripting

D : Cross-site request forgery

Answer: A

Question 2

Which of the following roles involves overseeing billing, purchasing, and requesting audit reports for an organization within a cloud environment?

Options :

A : Cloud service user

B : Cloud service business manager

C : Cloud service administrator

D : Cloud service integrator

Answer: B

Question 3

What type of PII is regulated based on the type of application or per the conditions of the specific hosting agreement?

Options :

A : Specific

B : Contractual

C : regulated

D : Jurisdictional

Answer: B

Question 4

Cryptographic keys for encrypted data stored in the cloud should be ________________ .

Options :

A : Not stored with the cloud provider.

B : Generated with redundancy

C : At least 128 bits long

D : Split into groups

Answer: A

Question 5

A crucial decision any company must make is in regard to where it hosts the data systems it depends on. A

debate exists as to whether it's best to lease space in a data center or build your own data center--and now with

cloud computing, whether to purchase resources within a cloud.

What is the biggest advantage to leasing space in a data center versus procuring cloud services?

Options :

A : Regulations

B : Control

C : Security

D : Costs

Answer: B

Free CCSP Mock Exam – Practice Online Confidently