Official isc ccsp - Study guides, Class notes & Summaries

Authenticated encryption with associated data (AEAD) - Symmetric encryption algorithms that simultaneously support and apply confidentiality and authentication. Blue/green - Blue/green may be used where the organization has a mirror of the production environment and logic that can switch users to the new environment once confidence of functionality is reached. Container - Small form factor-independent executable package of software that is installed and maintained upon a host operating sys...

Anything-as-a-Service - Anything-as-a-service, or "XaaS," refers to the growing diversity of services available over the Internet via cloud computing as opposed to being provided locally, or on premises. Apache CloudStack - An open source cloud computing and Infrastructure as a Service (IaaS) platform developed to help Infrastructure as a Service make creating, deploying, and managing cloud services easier by providing a complete "stack" of features and components for cloud environments...

Agent of the government - A private citizen becomes an agent of the government when they perform an act that the government would need a warrant for, such as a search and seizure. Under those circumstances, the citizen must follow the same rules as the government. Baselines - Minimum requirements, especially regarding security as a minimum level. Cloud Controls Matrix (CCM) - Lists and categorizes the domains and controls, along with which elements and components are relevant per the contro...

Official (ISC)² CCSP - Domain 6: Legal & Compliance questions with correct answers

Australian Privacy Act 1988 - Regulates the handling of personal information about individuals. This includes the collection, use, storage, and disclosure of personal information, and access to and correction of that information. Criminal Law - A body of rules and statutes that defines conduct that is prohibited by the government and is set out to protect the safety and well-being of the public. Doctrine of the Proper Law - When a conflict of laws occurs, this determines in which jurisdicti...

Application Normative Framework (ANF) - A subset of the ONF that will contain only the information required for a specific business application to reach the targeted level of trust. Application programming interfaces (APIs) - A set of routines, standards, protocols, and tools for building software applications to access a web-based software application or web tool. Application virtualization - Software technology that encapsulates application software from the underlying operating system on...

Australian Privacy Act 1988 CORRECT ANSWER Regulates the handling of personal information about individuals. This includes the collection, use, storage, and disclosure of personal information, and access to and correction of that information. Criminal Law CORRECT ANSWER A body of rules and statutes that defines conduct that is prohibited by the government and is set out to protect the safety and well-being of the public. Doctrine of the Proper Law CORRECT ANSWER When a conflict of laws occ...

Official (ISC)² CCSP - Chapter 1- Cloud Concepts Architecture and Design Domain.

The HealthCare Certified Information Security and Privacy Practitioner (HCISPP) credential recognizes the knowledge and skills necessary to perform and conduct security and privacy work for health care organizations. True False True A certification is an official statement that validates that a person has satisfied specific job requirements. True False True The CISSP-ISSEP concentration requires that a candidate demonstrate two years of professional experience in the area of architecture...