File Info
| Exam | Certificate of Cloud Security Knowledge |
| Number | CCSK |
| File Name | CSA.CCSK.VCEplus.2024-08-26.74q.vcex |
| Size | 37 KB |
| Posted | Aug 26, 2024 |
| Download | CSA.CCSK.VCEplus.2024-08-26.74q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
How is encryption managed on multi-tenant storage?
- Single key for all data owners
- One key per data owner
- Multiple keys per data owner
- The answer could be A, B, or C depending on the provider
- C for data subject to the EU Data Protection Directive; B for all others
Correct answer: B
Question 2
Which type of application security testing tests running applications and includes tests such as web vulnerability testing and fuzzing?
- Code Review
- Static Application Security Testing (SAST)
- Unit Testing
- Functional Testing
- Dynamic Application Security Testing (DAST)
Correct answer: E
Question 3
CCM: The Cloud Service Delivery Model Applicability column in the CCM indicates the applicability of the cloud security control to which of the following elements?
- Mappings to well-known standards and frameworks
- Service Provider or Tenant/Consumer
- Physical, Network, Compute, Storage, Application or Data
- SaaS, PaaS or IaaS
Correct answer: D
Question 4
Any given processor and memory will nearly always be running multiple workloads, often from different tenants.
- False
- True
Correct answer: B
Question 5
In which deployment model should the governance strategy consider the minimum common set of controls comprised of the Cloud Service Provider contract and the organization's internal governance agreements?
- Public
- PaaS
- Private
- IaaS
- Hybrid
Correct answer: E
Question 6
Which statement best describes why it is important to know how data is being accessed?
- The devices used to access data have different storage formats.
- The devices used to access data use a variety of operating systems and may have different programs installed on them.
- The device may affect data dispersion.
- The devices used to access data use a variety of applications or clients and may have different security characteristics.
- The devices used to access data may have different ownership characteristics.
Correct answer: D
Question 7
What is resource pooling?
- The provider’s computing resources are pooled to serve multiple consumers.
- Internet-based CPUs are pooled to enable multi-threading.
- The dedicated computing resources of each client are pooled together in a colocation facility.
- Placing Internet (“cloud”) data centers near multiple sources of energy, such as hydroelectric dams.
- None of the above.
Correct answer: A
Question 8
Your SLA with your cloud provider ensures continuity for all services.
- False
- True
Correct answer: A
Question 9
What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?
- The physical location of the data and how it is accessed
- The fragmentation and encryption algorithms employed
- The language of the data and how it affects the user
- The implications of storing complex information on simple storage systems
- The actual size of the data and the storage format
Correct answer: D
Question 10
Which cloud-based service model enables companies to provide client-based access for partners to databases or applications?
- Platform-as-a-service (PaaS)
- Desktop-as-a-service (DaaS)
- Infrastructure-as-a-service (IaaS)
- Identity-as-a-service (IDaaS)
- Software-as-a-service (SaaS)
Correct answer: A
