Discuss ISC2 CCSP Exam Topic 7 Question 21

Which of the following best describes the purpose and scope of ISO/IEC 27034-1?

ADescribes international privacy standards for cloud computing

BServes as a newer replacement for NIST 800-52 r4

CProvides on overview of network and infrastructure security designed to secure cloud applications.

DProvides an overview of application security that introduces definitive concepts, principles, and processes involved in application security.

Suggested Answer: D

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Alona 11 months ago

I’m surprised it’s not more well-known!

Alonso 12 months ago

Nope, definitely not a replacement for NIST 800-52.

Sunny 12 months ago

Wait, I thought it was more about cloud security?

Roosevelt 12 months ago

Totally agree, D is the right choice!

Fidelia 1 year ago

It's all about application security principles.

Brock 1 year ago

I vaguely recall that this standard is supposed to provide a framework for application security, so I think D could be the best choice here.

Nikita 1 year ago

I'm a bit confused because I thought ISO/IEC 27034-1 was more about cloud security, but now I'm not so sure.

Yoko 1 year ago

I remember practicing a question about ISO standards, and I feel like D might be the right answer since it talks about application security concepts.

Lonna 1 year ago

I think ISO/IEC 27034-1 is related to application security, but I'm not entirely sure if it covers all aspects or just specific principles.

Nikita 1 year ago

Hmm, this looks like a tricky one. I'll need to think through the different options carefully.

Ira 1 year ago

If I remember correctly, not-for-profits generally don't have access to equity markets, so maybe they can't fund from there.

Salome 1 year ago

I'm not sure about this one. I'll need to review my notes on AMP file management to see if any of these tools ring a bell.

Desire 1 year ago

Hmm, I'm a bit unsure about this one. Recovering the stolen credit card details seems like it could be important, but I'm not sure if that's a suitable objective for a forensic analysis. I'll need to think this through carefully.

Chan 1 year ago

This looks like a tricky PXE boot issue. I'll need to carefully analyze the error messages and network details to determine the best course of action.

ISC2 CCSP Exam - Topic 7 Question 21 Discussion