CCSK Certification Questions – Certificate of Cloud Security Knowledge – PassQuestion Free Questions To Test Online

1. All cloud services utilize virtualization technologies.

False

True

2. If there are gaps in network logging data, what can you do?

Nothing. There are simply limitations around the data that can be logged in the cloud.

Ask the cloud provider to open more ports.

You can instrument the technology stack with your own logging.

Ask the cloud provider to close more ports.

Nothing. The cloud provider must make the information available.

3. CCM: In the CCM tool, a _____________________ is a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.

Risk Impact

Domain

Control Specification

4. Who is responsible for the security of the physical infrastructure and virtualization platform?

The cloud consumer

The majority is covered by the consumer

It depends on the agreement

The responsibility is split equally

The cloud provider

5. What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?

The physical location of the data and how it is accessed

The fragmentation and encryption algorithms employed

The language of the data and how it affects the user

The implications of storing complex information on simple storage systems

The actual size of the data and the storage format

6. Which cloud-based service model enables companies to provide client-based access for partners to databases or applications?

Platform-as-a-service (PaaS)

Desktop-as-a-service (DaaS)

Infrastructure-as-a-service (IaaS)

Identity-as-a-service (IDaaS)

Software-as-a-service (SaaS)

7. CCM: The following list of controls belong to which domain of the CCM?

GRM 06 – Policy

GRM 07 – Policy Enforcement

GRM 08 – Policy Impact on Risk Assessments

GRM 09 – Policy Reviews

GRM 10 – Risk Assessments

GRM 11 – Risk Management Framework

Governance and Retention Management

Governance and Risk Management

Governing and Risk Metrics

8. Which attack surfaces, if any, does virtualization technology introduce?

The hypervisor

Virtualization management components apart from the hypervisor

Configuration and VM sprawl issues

All of the above

9. APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

False

True

10. Which of the following is NOT a cloud computing characteristic that impacts incidence response?

The on demand self-service nature of cloud computing environments.

Privacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.

The possibility of data crossing geographic or jurisdictional boundaries.

Object-based storage in a private cloud.

The resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.

CCSK Certification Questions – Certificate of Cloud Security Knowledge

CCSK Certification Questions – Certificate of Cloud Security Knowledge

Leave a Reply Cancel reply