Plan and Implementation of Security Controls CCSP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which physical control is specifically designed to limit access to a data center's server floor to authorized personnel only?

   • ACCTV cameras monitoring the perimeter
   • BMantrap with biometric verification
   • CFire suppression system using inert gas
   • DHVAC system with redundant cooling units
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of system hardening in a cloud-hosted virtual machine?

   • ATo automatically scale the virtual machine based on demand
   • BTo increase the processing power of the virtual machine
   • CTo encrypt all data stored on the virtual machine
   • DTo reduce the attack surface by disabling unnecessary services and applying secure configurations
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the purpose of packet capture in network security monitoring?

   • ATo record the actual data packets traversing the network for analysis
   • BTo encrypt network traffic
   • CTo manage user identities
   • DTo block malicious traffic in real time
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A financial services company is migrating its core banking application to a public cloud provider. The compliance team requires that access to the physical servers hosting the application be restricted to authorized personnel only, and that all access attempts be logged for audit. The cloud provider offers a shared responsibility model. Which control should the company implement to meet these requirements?

   • AImplement a visitor management process for the company's own employees who need to visit the data center.
   • BEnable data center access logging and review the logs monthly for any unauthorized access attempts.
   • CRequest the provider's SOC 2 report and verify that physical access controls and monitoring are in place.
   • DConfigure the cloud provider's physical access control system to require multi-factor authentication for all data center entry points.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which environmental control is most directly responsible for maintaining temperature and humidity within acceptable ranges in a data center?

   • AFire suppression system
   • BHVAC system
   • CMantrap
   • DCCTV camera
   Reveal Solution Discussion Select an answer first