Evaluate Cloud Service Providers (CSP) CCSP Practice Questions (Page 7)

Questions 31–34

1. 31foundation · easy

   What does a product certification for a cloud subsystem typically validate?

   • AThe subsystem's security features and functional capabilities
   • BThe subsystem's compatibility with all other cloud products
   • CThe subsystem's market share and popularity
   • DThe subsystem's ability to operate without any configuration
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What do Evaluation Assurance Levels (EALs) in Common Criteria represent?

   • AThe performance speed of the product under load
   • BIncreasing levels of assurance that the product meets its security requirements
   • CThe cost of the product's license
   • DThe number of security features included in the product
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   When developing criteria to evaluate a cloud service provider, which factor should be included?

   • AThe provider's office location and employee satisfaction scores
   • BThe provider's use of a specific programming language for its internal systems
   • CThe provider's social media presence and brand popularity
   • DThe provider's compliance with relevant regulations and standards
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company is evaluating two cloud providers. Provider A has an ISO 27001 certificate and a SOC 2 Type II report. Provider B has a SOC 2 Type I report and a self-assessment. The company's security team needs to verify that the provider's controls are effective over a period of time. Which provider's evidence is stronger for this requirement?

   • ABoth are equally strong because they are SOC 2 reports
   • BProvider A, because SOC 2 Type II tests controls over a period of time
   • CProvider B, because SOC 2 Type I is more recent
   • DProvider B, because self-assessment provides more detailed insight
   Reveal Solution Discussion Select an answer first