CCSP Practice Test

Static software security testing typically uses __________ as a measure of how thorough
the testing was.
Response:

A.

Number of testers

B.

Flaws detected

C.

Code coverage

D.

Malware hits

At which layer does the IPSec protocol operate to encrypt and protect communications
between two parties?
Response:

A.

Network

B.

Application

C.

Transport

D.

Data link

You are the security manager for a small application development company. Your company
is considering the use of the cloud for software testing purposes. Which cloud service
model is most likely to suit your needs?
Response:

A.

IaaS

B.

PaaS

C.

SaaS

D.

LaaS

Which of the following is not a factor an organization might use in the cost-benefit
analysis when deciding whether to migrate to a cloud environment?
Response:

A.

Pooled resources in the cloud

B.

Shifting from capital expenditures to support IT investment to operational expenditures

C.

The time savings and efficiencies offered by the cloud service

D.

Branding associated with which cloud provider might be selected

Which of the following storage types are used with an Infrastructure as a Service
(IaaS) solution?
Response:

A.

Volume and block

B.

Structured and object

C.

Unstructured and ephemeral

D.

Volume and object