Question 1

Which data point that auditors always desire is very difficult to provide within a cloud environment?

Options :

A : Access policy

B : Systems architecture

C : Baselines

D : Privacy statement

Answer: B

Question 2

Which of the following threat types involves the sending of invalid and manipulated requests through a user's client to execute commands on the application under their own credentials?

Options :

A : Injection

B : Cross-site request forgery

C : Missing function-level access control

D : Cross-site scripting

Answer: B

Question 3

Which of the cloud deployment models offers the easiest initial setup and access for the cloud customer?

Options :

A : Hybrid

B : Community

C : Private

D : Public

Answer: D

Question 4

Which of the following threat types can occur when an application does not properly validate input and can be leveraged to send users to malicious sites that appear to be legitimate?

Options :

A : Unvalidated redirects and forwards

B : Insecure direct object references

C : Security miscomfiguration

D : Sensitive data exposure

Answer: A

Question 5

Which of the cloud deployment models is used by popular services such as iCloud, Dropbox, and OneDrive?

Options :

A : Hybrid

B : Public

C : Private

D : Community

Answer: B

Free CCSP Mock Exam – Practice Online Confidently

Buying Options: