File Info
| Exam | Certificate of Cloud Security Knowledge |
| Number | CCSK |
| File Name | CSA.CCSK.VCEplus.2020-05-04.60q.vcex |
| Size | 31 KB |
| Posted | May 04, 2020 |
| Download | CSA.CCSK.VCEplus.2020-05-04.60q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
All cloud services utilize virtualization technologies.
- False
- True
Correct answer: B
Question 2
If there are gaps in network logging data, what can you do?
- Nothing. There are simply limitations around the data that can be logged in the cloud.
- Ask the cloud provider to open more ports.
- You can instrument the technology stack with your own logging.
- Ask the cloud provider to close more ports.
- Nothing. The cloud provider must make the information available.
Correct answer: C
Question 3
CCM: In the CCM tool, a _____________________ is a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.
- Risk Impact
- Domain
- Control Specification
Correct answer: C
Question 4
Who is responsible for the security of the physical infrastructure and virtualization platform?
- The cloud consumer
- The majority is covered by the consumer
- It depends on the agreement
- The responsibility is split equally
- The cloud provider
Correct answer: E
Question 5
What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?
- The physical location of the data and how it is accessed
- The fragmentation and encryption algorithms employed
- The language of the data and how it affects the user
- The implications of storing complex information on simple storage systems
- The actual size of the data and the storage format
Correct answer: D
Question 6
Which cloud-based service model enables companies to provide client-based access for partners to databases or applications?
- Platform-as-a-service (PaaS)
- Desktop-as-a-service (DaaS)
- Infrastructure-as-a-service (IaaS)
- Identity-as-a-service (IDaaS)
- Software-as-a-service (SaaS)
Correct answer: A
Question 7
CCM: The following list of controls belong to which domain of the CCM?
GRM 06 - Policy GRM 07 - Policy Enforcement GRM 08 - Policy Impact on Risk Assessments GRM 09 - Policy Reviews GRM 10 - Risk Assessments GRM 11 - Risk Management Framework
- Governance and Retention Management
- Governance and Risk Management
- Governing and Risk Metrics
Correct answer: B
Question 8
Which attack surfaces, if any, does virtualization technology introduce?
- The hypervisor
- Virtualization management components apart from the hypervisor
- Configuration and VM sprawl issues
- All of the above
Correct answer: D
Question 9
APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.
- False
- True
Correct answer: B
Question 10
Which of the following is NOT a cloud computing characteristic that impacts incidence response?
- The on demand self-service nature of cloud computing environments.
- Privacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.
- The possibility of data crossing geographic or jurisdictional boundaries.
- Object-based storage in a private cloud.
- The resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.
Correct answer: B
