Thanks, I got the practice test from Training Camp. Training camp was offered to me by my employer, so I didn't inquire about their references. (or did you mean what materials did they reference?) The material we used was the official ISC2 publication "Certified Cloud Security Professional Official (ISC)2 Student Guide." IMHO, this guide is very poorly written. But that's the subject for another thread.
17. Cloud computing is based on which approach to service delivery:
a) virtualization
b) thin client technology
c) Virtualization or thin client technology
d) Tightly coupled architectural models
I answered "a," but the correct answer was "c." Really?Just the fact that they have "or" in the answer made it not seem correct. That combined with not having heard about thin clients since the early days of the internet made that answer seem wrong.
32. Information Rights management (IRM) is generally associated with the following attributes:
a) Data rights management, the use of role-based access control, the installation of a local client agent, and the ability to integrate with the data loss prevention (DLP) solutions.
b) Data rights management, the use of rule based access control, the installation of a local client agent, and the ability to integrate with data loss prevention (DLP) solutions
c) role-based access control, the installation of a local client agent, and problems with interoperability with solutions such as data loss prevention (DLP) solutions.
d) Role-based access control, the installation of a local client agent, and the ability to integrate with data loss prevention (DLP) solutions.
I answered "d" because they said they were looking for attributes. The only difference between "d" and the right answer "a" is it mentions data rights management, which is a technology not an attribute.
65. A risk assessment is based on the following, in order:
a) vulnerability, threat, probability, impact, existing controls, and risk determination.
b) vulnerability, threat, impact, probability, and risk de3termination
c) threat, vulnerability, existing controls, probability, impact and risk determination
d) threat, vulnerability, probability, impact, and risk determination
I answer b, which matches my instructor's drawing in class. The correct answer is D.
My class notes and the photo of the instructor's drawing clearly says:
Identify assets
Identify vulnerabilities
Identify threats
Identify exposure factor (impact)
Identify Likelihood (probability)
Perform qualitative risk analysis
perform quantitative risk analysis. which means that my selected answer was correct.
HOWEVER ... between when I wrote that and now, I found this in the Student Guide:
Risk Management Process
An organization will conduct a risk assessment (the term risk analysis is sometimes intercahgned with risk assessment) to evaluate:
- threats to its assets
- vulnerabilities present in the envrionmnet
- the likelihood that a threat will be realized ...
- the impact that the exposure being realized will have on the organization
- Countermeasures available ...
- the residual risk
So that matches the right answer, D. So I guess that one is now answered. Go with the official ISC2 guidebook.
135: Generally, there are two types of cooling, and the return air temperature is based on:
a) latent cooling (remove moisture) and sensible cooling (remove heat), and the temperature is measured at the inlet point.
b) latent cooling (remove moisture) and sensible cooling (remove heat), and the temperature is measured at the server exhaust point
c) latent cooling (remove heat), and sensible cooling (remove moisture), and the temperature is measured at the inlet point.
d) latent cooling (remove heat) and sensible cooling (remove moisture), and the temperature is measured at the server exhaust point.
Well that's just wrong. The air temperature is measured as it exits the room, not as it enters the room. My selected answer was: Latent cooling (remove moisture) and sensible cooling (remove heat),and the temperature is measured at the exhaust point.
Thoughts?
Thank you very much for your help!
