Understand Design Principles of Secure Cloud Computing CCSP Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   In the shared responsibility model, which party is responsible for patching the underlying operating system in an IaaS deployment?

   • ABoth parties equally
   • BThe customer
   • CThe cloud provider
   • DNo one is responsible
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A manufacturing company is conducting a BIA for its cloud-hosted ERP system. The system generates $50,000 in revenue per hour during business hours. The company is evaluating a disaster recovery solution that costs $20,000 per year. The solution is expected to reduce downtime from 10 hours to 2 hours per incident, with an estimated one incident per year. What is the return on investment (ROI) of this DR solution?

   • AThe ROI is 1900%, because the solution saves $400,000 in avoided downtime per year against a $20,000 annual cost.
   • BThe ROI cannot be determined without knowing the cost of the cloud infrastructure itself.
   • CThe ROI is 2000%, because the solution saves $400,000 in avoided downtime per year against a $20,000 annual cost.
   • DThe ROI is 400%, because the solution saves $80,000 in avoided downtime per year.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which strategy is most effective in avoiding vendor lock-in in a cloud environment?

   • ASigning long-term contracts with a single provider
   • BStoring data in proprietary formats
   • CUsing proprietary APIs and services
   • DAdopting open standards and portable data formats
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   In the cloud data lifecycle, which stage involves applying data loss prevention (DLP) controls to monitor and restrict how data is transmitted or shared?

   • AShare
   • BStore
   • CCreate
   • DUse
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company is using a SaaS email service. The company's security team is concerned about data loss and wants to ensure that email data is backed up. Under the shared responsibility model, who is responsible for backing up the email data?

   • AThe cloud provider that hosts the SaaS service is responsible for backups.
   • BThe SaaS provider and the customer share responsibility for backups equally.
   • CThe customer is responsible for backing up their email data, as data is a customer responsibility in all service models.
   • DThe SaaS provider is responsible for all backups, including the customer's email data.
   Reveal Solution Discussion Select an answer first