Certificate of Cloud Security Knowledge CCSK Actual Questions

dumps2022-02-22T02:16:00+08:00

Certificate of Cloud Security Knowledge CCSK actual questions are online, which are the best material for you to study the test. There are 60 multiple choice questions in real CCSK exam, and you have 90 minutes to write the test. The minimum passing score of CSA Certification CCSK exam is 80%. Free Certificate of Cloud Security Knowledge CCSK exam actual questions are below.

Page 1 of 2

1. All cloud services utilize virtualization technologies.

False

True

2. If there are gaps in network logging data, what can you do?

Nothing. There are simply limitations around the data that can be logged in the cloud.

Ask the cloud provider to open more ports.

You can instrument the technology stack with your own logging.

Ask the cloud provider to close more ports.

Nothing. The cloud provider must make the information available.

3. CCM: In the CCM tool, a _____________________ is a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.

Risk Impact

Domain

Control Specification

4. Who is responsible for the security of the physical infrastructure and virtualization platform?

The cloud consumer

The majority is covered by the consumer

It depends on the agreement

The responsibility is split equally

The cloud provider

5. What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?

The physical location of the data and how it is accessed

The fragmentation and encryption algorithms employed

The language of the data and how it affects the user

The implications of storing complex information on simple storage systems

The actual size of the data and the storage format

6. Which cloud-based service model enables companies to provide client-based access for partners to databases or applications?

Platform-as-a-service (PaaS)

Desktop-as-a-service (DaaS)

Infrastructure-as-a-service (IaaS)

Identity-as-a-service (IDaaS)

Software-as-a-service (SaaS)

7. CCM: The following list of controls belong to which domain of the CCM?

GRM 06 C Policy

GRM 07 C Policy Enforcement

GRM 08 C Policy Impact on Risk Assessments

GRM 09 C Policy Reviews

GRM 10 C Risk Assessments

GRM 11 C Risk Management Framework

Governance and Retention Management

Governance and Risk Management

Governing and Risk Metrics

8. Which attack surfaces, if any, does virtualization technology introduce?

The hypervisor

Virtualization management components apart from the hypervisor

Configuration and VM sprawl issues

All of the above

9. APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

False

True

10. Which of the following is NOT a cloud computing characteristic that impacts incidence response?

The on demand self-service nature of cloud computing environments.

Privacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.

The possibility of data crossing geographic or jurisdictional boundaries.

Object-based storage in a private cloud.

The resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.

Page 2 of 2

11. Big data includes high volume, high variety, and high velocity.

False

True

12. CCM: A hypothetical company called: “Health4Sure” is located in the United States and provides cloud based services for tracking patient health. The company is compliant with HIPAA/HITECH Act among other industry standards. Health4Sure decides to assess the overall security of their cloud service against the CCM toolkit so that they will be able to present this document to potential clients.

Which of the following approach would be most suitable to assess the overall security posture of Health4Sure’s cloud service?

The CCM columns are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered ad a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls. This approach will save time.

The CCM domain controls are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered as a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls thoroughly. This approach saves time while being able to assess the company’s overall security posture in an efficient manner.

The CCM domains are not mapped to HIPAA/HITECH Act. Therefore Health4Sure should assess the security posture of their cloud service against each and every control in the CC

This approach will allow a thorough assessment of the security posture.

13. A defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources is called what?

An entitlement matrix

A support table

An entry log

A validation process

An access log

14. Cloud applications can use virtual networks and other structures, for hyper-segregated environments.

False

True

15. Your cloud and on-premises infrastructures should always use the same network address ranges.

False

True

16. Which layer is the most important for securing because it is considered to be the foundation for secure cloud operations?

Infrastructure

Datastructure

Infostructure

Applistructure

Metastructure

17. Why is a service type of network typically isolated on different hardware?

It requires distinct access controls

It manages resource pools for cloud consumers

It has distinct functions from other networks

It manages the traffic between other networks

It requires unique security

18. Which governance domain deals with evaluating how cloud computing affects compliance with internal security policies and various legal requirements, such as regulatory and legislative?

Legal Issues: Contracts and Electronic Discovery

Infrastructure Security

Compliance and Audit Management

Information Governance

Governance and Enterprise Risk Management

Certificate of Cloud Security Knowledge CCSK Actual Questions

Certificate of Cloud Security Knowledge CCSK Actual Questions

Share this post

Leave a Reply Cancel reply