CCSP Exam topics /
freecram test with
100% correct answers
Which of the following standards primarily pertains to cabling
designs and setups in a data center?
A. IDCA
B. BICSI
C. NFPA
D. Uptime Institute
B. BICSI
Which of the following publishes the most commonly used standard
for data center design in regard to tiers and topologies?
A. IDCA
B. Uptime Institute
C. NFPA
D. BICSI
B. Uptime Institute
Which United States program was designed to enable organizations
to bridge the gap between privacy laws and requirements of the
United States and the European Union?
A. GLBA
B. HIPAA
C. Safe Harbor
D. SOX
C. Safe Harbor
Which protocol allows a system to use block-level storage as if it
was a SAN, but over TCP network traffic instead?
A. SATA
B. iSCSI
C. TLS
D. SCSI
,B. iSCSI
Which of the following threat types involves the sending of
untrusted data to a user's browser to be executed with their own
credentials and access?
A. Missing function level access control
B. Cross-site scripting
C. Cross-site request forgery
D. Injection
B. Cross-site scripting
Which of the following pertains to a macro level approach to data
center design rather than the traditional tiered approach to data
centers?
A. IDCA
B. NFPA
C. BICSI
D. Uptime Institute
A. IDCA
Which of the following threat types can occur when an application
does not properly validate input and can be leveraged to send users
to malicious sites that appear to be legitimate?
A. Unvalidated redirects and forwards
B. Insecure direct object references
C. Security miscomfiguration
D. Sensitive data exposure
A. Unvalidated redirects and forwards
Which of the following threat types involves an application
developer leaving references to internal information and
configurations in code that is exposed to the client?
A. Sensitive data exposure
B. Security misconfiguration
C. Insecure direct object references
D. Unvalidated redirect and forwards
C. Insecure direct object references
Which one of the following threat types to applications and services
involves the sending of requests that are invalid and manipulated
through a user's client to execute commands on the application
under the user's own credentials?
A. Injection
, B. Missing function-level access control
C. Cross-site scripting
D. Cross-site request forgery
D. Cross-site request forgery
Different certifications and standards take different approaches to
data center design and operations. Although many traditional
approaches use a tiered methodology, which of the following utilizes
a macro-level approach to data center design?
A. IDCA
B. BICSI
C. Uptime Institute
D. NFPA
A. IDCA
Data center and operations design traditionally takes a tiered,
topological approach.Which of the following standards is focused on
that approach and is prevalently used throughout the industry?
A. IDCA
B. NFPA
C. BICSI
D. Uptime Institute
D. Uptime Institute
Which of the following threat types involves leveraging a user's
browser to send untrusted data to be executed with legitimate
access via the user's valid credentials?
A. Injection
B. Missing function-level access control
C. Cross-site scripting
D. Cross-site request forgery
C. Cross-site scripting
Many different common threats exist against web-exposed services
and applications. One attack involves attempting to leverage input
fields to execute queries in a nested fashion that is unintended by
the developers.What type of attack is this?
A. Injection
B. Missing function-level access control
C. Cross-site scripting
D. Cross-site request forgery
A. Injection
Voordelen van het kopen van samenvattingen bij Stuvia op een rij:
Verzekerd van kwaliteit door reviews
Stuvia-klanten hebben meer dan 700.000 samenvattingen beoordeeld. Zo weet je zeker dat je de beste documenten koopt!
Snel en makkelijk kopen
Je betaalt supersnel en eenmalig met iDeal, creditcard of Stuvia-tegoed voor de samenvatting. Zonder lidmaatschap.
Focus op de essentie
Samenvattingen worden geschreven voor en door anderen. Daarom zijn de samenvattingen altijd betrouwbaar en actueel. Zo kom je snel tot de kern!
Veelgestelde vragen
Wat krijg ik als ik dit document koop?
Je krijgt een PDF, die direct beschikbaar is na je aankoop. Het gekochte document is altijd, overal en oneindig toegankelijk via je profiel.
Tevredenheidsgarantie: hoe werkt dat?
Onze tevredenheidsgarantie zorgt ervoor dat je altijd een studiedocument vindt dat goed bij je past. Je vult een formulier in en onze klantenservice regelt de rest.
Van wie koop ik deze samenvatting?
Stuvia is een marktplaats, je koop dit document dus niet van ons, maar van verkoper BRAINBOOSTERS. Stuvia faciliteert de betaling aan de verkoper.
Zit ik meteen vast aan een abonnement?
Nee, je koopt alleen deze samenvatting voor €14,41. Je zit daarna nergens aan vast.