Which OWASP API Security Risk occurs when an API exposes sensitive data such as credit card numbers or personal information without proper protection?

Broken Object Level Authorization

In the OWASP ASVS, what do the verification levels (e.g., Level 1, Level 2, Level 3) represent?

The depth of security verification required, with higher levels requiring more rigorous controls

The order in which security tests should be performed

The severity of vulnerabilities found in an application

The number of security controls that must be implemented

Which SANS Top 25 software error is most likely to be exploited when a cloud application allows a user to upload a file and then serves that file back to other users without proper validation?

Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)

Improper Control of Generation of Code (Code Injection)

Unrestricted Upload of File with Dangerous Type

Certified Cloud Security Professional

Domain 4Objective 1

Advocate Training and Awareness for Application Security CCSP Practice Questions (Page 2)

Part of the Cloud Application Security domain, which accounts for 16% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

8concepts

16%of the exam

Questions 6–10

6foundation · easy
Which OWASP API Security Risk occurs when an API exposes sensitive data such as credit card numbers or personal information without proper protection?
Select an answer first
7foundation · easy
In the OWASP ASVS, what do the verification levels (e.g., Level 1, Level 2, Level 3) represent?
Select an answer first
8foundation · easy
A cloud application developer stores sensitive user documents in a cloud storage bucket but forgets to set the access control list. Which common pitfall does this represent?
Select an answer first
9foundation · easy
Which cloud deployment model is characterized by infrastructure that is provisioned for exclusive use by a single organization, but may be located on-premises or at a third-party data center?
Select an answer first
10foundation · easy
Which SANS Top 25 software error is most likely to be exploited when a cloud application allows a user to upload a file and then serves that file back to other users without proper validation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Advocate Training and Awareness for Application Security CCSP Practice Questions (Page 2)

Questions 6–10

Which OWASP API Security Risk occurs when an API exposes sensitive data such as credit card numbers or personal information without proper protection?

In the OWASP ASVS, what do the verification levels (e.g., Level 1, Level 2, Level 3) represent?

A cloud application developer stores sensitive user documents in a cloud storage bucket but forgets to set the access control list. Which common pitfall does this represent?

Which cloud deployment model is characterized by infrastructure that is provisioned for exclusive use by a single organization, but may be located on-premises or at a third-party data center?

Which SANS Top 25 software error is most likely to be exploited when a cloud application allows a user to upload a file and then serves that file back to other users without proper validation?

Keep studying — Cloud Application Security