CCSP Exam Questions and Answers | Exam-Dumps.net (Page: 16)

QUESTION: 76

Which of the following threat types can occur when baselines are not appropriately applied or unauthorized changes are made?

Insecure direct object references
Unvalidated redirects and forwards
Security misconfiguration
Sensitive data exposure

Answer(s): C

Explanation:

Security misconfigurations occur when applications and systems are not properly configured or maintained in a secure manner. This can be caused from a shortcoming in security baselines or configurations, unauthorized changes to system configurations, or a failure to patch and upgrade systems as the vendor releases security patches.

Reveal Solution Next Question

QUESTION: 77

What is the data encapsulation used with the SOAP protocol referred to?

Packet
Envelope
Payload
Object

Answer(s): B

Explanation:

Simple Object Access Protocol (SOAP) encapsulates its information in what is known as a SOAP envelope and then leverages common communications protocols for transmission.

Reveal Solution Next Question

QUESTION: 78

Which of the following threat types can occur when an application does not properly validate input and can be leveraged to send users to malicious sites that appear to be legitimate?

Unvalidated redirects and forwards
Insecure direct object references
Security miscomfiguration
Sensitive data exposure

Answer(s): A

Explanation:

Many web applications offer redirect or forward pages that send users to different, external sites. If these pages are not properly secured and validated, attackers can use the application to forward users off to sites for phishing or malware attempts. These attempts can often be more successful than direct phishing attempts because users will trust the site or application that sent them there, and they will assume it has been properly validated and approved by the trusted application's owners or operators. Security misconfiguration occurs when applications and systems are not properly configured for security--often a result of misapplied or inadequate baselines. Insecure direct object references occur when code references aspects of the infrastructure, especially internal or private systems, and an attacker can use that knowledge to glean more information about the infrastructure. Sensitive data exposure occurs when an application does not use sufficient encryption and other security controls to protect sensitive application data.

Reveal Solution Next Question

QUESTION: 79

Which publication from the United States National Institute of Standards and Technology pertains to defining cloud concepts and definitions for the various core components of cloud computing?

SP 800-153
SP 800-145
SP 800-53
SP 800-40

Answer(s): B

Explanation:

NIST Special Publications 800-145 is titled "The NIST Definition of Cloud Computing" and contains definitions and explanations of core cloud concepts and components.

Reveal Solution Next Question

QUESTION: 80

What is the biggest negative to leasing space in a data center versus building or maintain your own?

Costs
Control
Certification
Regulation

Answer(s): B

Explanation:

When leasing space in a data center, an organization will give up a large degree of control as to how it is built and maintained, and instead must conform to the policies and procedures of the owners and operators of the data center.

Reveal Solution Next Question

ISC CCSP Exam (page: 16) ISC Certified Cloud Security Professional (CCSP) Updated on: 01-Sep-2025

QUESTION: 76

Explanation:

QUESTION: 77

Explanation:

QUESTION: 78

Explanation:

QUESTION: 79

Explanation:

QUESTION: 80

Explanation:

ISC CCSP Exam (page: 16)
ISC Certified Cloud Security Professional (CCSP)
Updated on: 01-Sep-2025