ISC2 Cloud Security Professional Exam Study Guide and Questions-Answers

1. ABSTRACT Get complete detail on CCSP exam guide to crack ISC2 Cloud Security Professional. You can collect all information on CCSP tutorial, practice test, books, study material, exam questions, and syllabus. Firm your knowledge on ISC2 Cloud Security Professional and get ready to crack CCSP certification. Explore all information on CCSP exam with number of questions, passing percentage and time duration to complete test. www.edusum.com ISC2 CCSP CCSP Study Guide and Questions Answers

2. WWW.EDUSUM.COM Introduction to ISC2 Certified Cloud Security Professional (CCSP) Exam The ISC2 CCSP Exam is challenging and thorough preparation is essential for success. This exam study guide is designed to help you prepare for the CCSP certification exam. It contains a detailed list of the topics covered on the Professional exam, as well as a detailed list of preparation resources. These study guide for the ISC2 Cloud Security Professional will help guide you through the study process for your certification. CCSP ISC2 Cloud Security Professional Exam Summary ●Exam Name: ISC2 Cloud Security Professional ●Exam Code: CCSP ●Exam Price: $599 (USD) ●Duration: 180 mins ●Number of Questions: 125 ●Passing Score: 700/1000 ●Schedule Exam: Pearson VUE ●Sample Questions:ISC2 CCSP Sample Questions ●Recommended Practice: ISC2 CCSP Certification Practice Exam 1

3. WWW.EDUSUM.COM Exam Syllabus: CCSP ISC2 Certified Cloud Security Professional (CCSP) 1. Cloud Concepts, Architecture and Design (17%) ● Understand Cloud Computing Concepts ● Describe Cloud Reference Architecture ● Understand Security Concepts Relevant to Cloud Computing ● Understand Design Principles of Secure Cloud Computing ● Evaluate Cloud Service Providers 2. Cloud Data Security (19%) ● Describe Cloud Data Concepts ● Design and Implement Cloud Data Storage Architectures ● Design and Apply Data Security Technologies and Strategies ● Implement Data Discovery ● Implement Data Classification ● Design and Implement Information Rights Management (IRM) ● Plan and Implement Data Retention, Deletion and Archiving Policies ● Design and Implement Auditability, Traceability and Accountability of Data Events 3. Cloud Platform & Infrastructure Security (17%) ● Comprehend Cloud Infrastructure Components ● Design a Secure Data Center ● Analyze Risks Associated with Cloud Infrastructure ● Design and Plan Security Controls ● Plan Disaster Recovery (DR) and Business Continuity (BC) 4. Cloud Application Security (17%) ● Advocate Training and Awareness for Application Security ● Describe the Secure Software Development Life Cycle (SDLC) Process ● Apply the Secure Software Development Life Cycle (SDLC) ● Apply Cloud Software Assurance and Validation ● Use Verified Secure Software ● Comprehend the Specifics of Cloud Application Architecture ● Design Appropriate Identity and Access Management (IAM) Solutions 5. Cloud Security Operations (17%) ● Implement and Build Physical and Logical Infrastructure for Cloud Environment ● Operate Physical and Logical Infrastructure for Cloud Environment 2

4. WWW.EDUSUM.COM ● Manage Physical and Logical Infrastructure for Cloud Environment ● Implement Operational Controls and Standards (e.g., Information Technology Infrastructure Library (ITIL), International ● Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 20000-1) ● Support Digital Forensics ● Manage Communication with Relevant Parties ● Manage Security Operations 6. Legal, Risk and Compliance (13%) ● Articulate Legal Requirements and Unique Risks within the Cloud Environment ● Understand Privacy Issues ● Understand Audit Process, Methodologies, and Required Adaptations for a Cloud Environment ● Understand Implications of Cloud to Enterprise Risk Management ● Understand Outsourcing and Cloud Contract Design ISC2 CCSP Certification Sample Questions and Answers To make you familiar with ISC2 Cloud Security Professional (CCSP) certification exam structure, we have prepared this sample question set. We suggest you to try our Sample Questions for CCSP CCSP Certification to test your understanding of ISC2 CCSP process with real ISC2 certification exam environment. CCSP ISC2 Cloud Security Professional Sample Questions:- 01. Which of the following is probably most important to include in a data archiving policy? a) Data format and type b) Data classification c) Encryption procedures and standards d) Data audit and review processes 02. Which of the following will typically be used by a cloud provider to offer assurance of security to cloud customers and mitigate the need for customers to audit the underlying infrastructure? a) Contracts b) SLA c) Certification d) Baselines 3

5. WWW.EDUSUM.COM 03. Your IT security director has asked you to evaluate a cloud provider to determine whether its security practices match with current organizational policy in regard to data sanitation processes. Compared to your traditional data center, which of the following options is unlikely to be available with a cloud provider? a) Degaussing b) Cryptographic erasure c) Overwriting d) Zeroing 04. You are the security officer for a small cloud provider offering public cloud IaaS; your clients are predominantly from the education sector, located in North America. Of the following technology architecture traits, which is probably the one your organization would most likely want to focus on? a) Reducing mean time to repair (MTTR) b) Reducing mean time between failure (MTBF) c) Reducing the recovery time objective (RTO) d) Automating service enablement 05. What is the final step of a quantitative risk analysis? a) Determine asset value. b) Assess the annualized rate of occurrence. c) Derive the annualized loss expectancy. d) Conduct a cost/benefit analysis. 06. A cloud customer performing a penetration test without the provider’s permission is risking ____________. a) Malware contamination b) Excessive fees for SLA violations c) Loss of market share d) Prosecution 07. Your company operates in a highly competitive market, with extremely high-value data assets. Senior management wants to migrate to a cloud environment but is concerned that providers will not meet the company’s security needs. Which deployment model would probably best suit the company’s needs? a) Public b) Community c) Private d) Hybrid 08. What is the concept of isolating an application from the underlying operating system for testing purposes? a) Abstracting 4

6. WWW.EDUSUM.COM b) Application virtualization c) Hosting d) Sandboxing 09. Which of the following standards addresses a company’s entire security program, involving all aspects of various security disciplines? a) ISO 27001 b) ISO 27002 c) NIST 800-37 d) SSAE 16 10. A cloud provider is looking to provide a higher level of assurance to current and potential cloud customers about the design and effectiveness of their security controls. Which of the following audit reports would the cloud provider choose as the most appropriate to accomplish this goal? a) SOC 1 b) SOC 3 c) SAS-70 d) SOC 2 Answers:- Answer 1 :- A Answer 2 :- C Answer 3 :- A Answer 4 :- D Answer 5 :- D Answer 6 :- D Answer 7 :- C Answer 8 :- B Answer 9 :- A Answer 10:- B 5