CCSP-3

You are in charge of creating the business continuity and disaster recovery (BC/DR) plan and procedures for your organization. Your organization has its production environment hosted in a cloud environment. You are considering using cloud backup services for your BC/DR purposes as well. What would probably be the best strategy for this approach, in terms of redundancy and resiliency?.

• A. Have your cloud provider also provide BC/DR backup

• B. Keep a BC/DR backup on the premises of your corporate headquarters.

• C. Use another cloud provider for the BC/DR backup.

• D. Move your production environment back into your corporate premises, and use your cloud provider to host your BC/DR backup.

You are in charge of creating the business continuity and disaster recovery (BC/DR) plan and procedures for your organization. You decide to have a tabletop test of the BC/DR activity. Which of the following will offer the best value during the test?

• A. Have all participants conduct their individual activities via remote meeting technology.

• B. Task a moderator well versed in BC/DR actions to supervise and present scenarios to the participants, including randomized special events.

• C. Provide copies of the BC/DR policy to all participants.

• D. Allow all users in your organization to participate.

You are in charge of creating the business continuity and disaster recovery (BC/DR) plan and procedures for your organization. Your organization has its production environment hosted by a cloud provider, and you have appropriate protections in place. Which of the following is a significant consideration for your BC/DR backup?

• Enough personnel at the BC/DR recovery site to ensure proper operations

• Good cryptographic key management

• Access to the servers where the BC/DR backup is stored

• Forensic analysis capabilities

A Security Assertion Markup Language (SAML) identity assertion token uses the______ protocol.

• Extensible Markup Language (XML)

• Hypertext Transfer Protocol (HTTP)

• Hypertext Markup Language (HTML)

• American Standard Code for Information Interchange (ASCII)

The minimum essential characteristics of a cloud data center are often referred to as “ping, power, pipe.” What does this term mean?

• Remote access for customer to racked devices in the data center; electrical utilities; connectivity to an Internet service provider (ISP)/the Internet

• Application suitability; availability; connectivity

• Infrastructure as a service (IaaS); software as a service (SaaS); platform as a service (PaaS)

• Anti-malware tools; controls against distributed denial of service (DDoS) attacks; physical/environmental security controls, including fire suppression

To support all aspects of the CIA triad (confidentiality, integrity, availability), all of the following aspects of a cloud data center need to be engineered with redundancies except _______.

• Power supply

• HVAC

• Administrative offices

• Internet service provider (ISP)/connectivity lines

Who is the cloud carrier?

• The cloud customer

• The cloud provider

• The regulator overseeing the cloud customer’s industry

• The ISP between the cloud customer and provider

Which of the following terms describes a means to centralize logical control of all net worked nodes in the environment, abstracted from the physical connections to each?

• Virtual private network (VPN)

• Software-defined network (SDN)

• Access control lists (ACLs)

• Role-based access control (RBAC)

Which of the following is a device specially purposed to handle the issuance, distribution, and storage of cryptographic keys?

• Key management box (KMB)

• Hardware security module (HSM

• Ticket-granting ticket (TGT)

• Trusted computing base (TCB)

When discussing the cloud, we often segregate the data center into the terms compute, storage, and networking. Compute is made up of__________ .______ and

• Routers; hosts

• Application programming interface (APIs); northbound interface (NBIs)

• Central processing unit (CPU); random-access memory (RAM)

• Virtualized; actual hardware devices