CCSK by Cloud Security Alliance Actual Free Exam Q&As

Question 1

Which statement best describes the impact of Cloud Computing on business continuity management?

A. The size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomes necessary. B. Clients need to do business continuity planning due diligence in case they suddenly need to switch providers. C. A general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers. D. Geographic redundancy ensures that Cloud Providers provide highly available services. E. Customers of SaaS providers in particular need to mitigate the risks of application lock-in.

Discussion 0

Correct Answer: D Vote an answer

Question 2

What is a cloud workload in terms of infrastructure and platform deployment?

A. A single software application hosted on the cloud B. A collection of physical hardware used to run applications C. A network of servers connected to execute processes D. Application software deployable on infrastructure/platform

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

Which plane in a network architecture is responsible for controlling all administrative actions?

A. Application plane B. Data plane C. Management plane D. Forwarding plane

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

Which of the following statements is true in regards to Data Loss Prevention (DLP)?

A. DLP can provide options for where data is stored. B. DLP can provide options for how data found in violation of a policy can be handled. C. DLP can classify all data in a storage repository. D. DLP can provide options for quickly deleting all of the data stored in a cloud environment. E. DLP never provides options for how data found in violation of a policy can be handled.

Discussion 0

Correct Answer: B Vote an answer

Question 5

Which aspect of assessing cloud providers poses the most significant challenge?

A. Limited visibility into internal operations and technology B. Excessive details shared by the cloud provider and consequent information overload C. Poor provider documentation and over-reliance on pooled audit D. Inconsistent policy standards and the proliferation of provider requirements

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

Which statement best describes the Data Security Lifecycle?

A. The Data Security Lifecycle has six stages, is strictly linear, and never varies. B. The Data Security Lifecycle has five stages, can be non-linear, and is distinct in that data must always pass through all phases. C. The Data Security Lifecycle has six stages, can be non-linear, and is distinct in that data must always pass through all phases. D. The Data Security Lifecycle has five stages, is circular, and varies in that some data may never pass through all stages. E. The Data Security Lifecycle has six stages, can be non-linear, and varies in that some data may never pass through all stages.

Discussion 0

Correct Answer: E Vote an answer

Question 7

In a cloud computing incident, what should be the initial focus of analysis due to the ephemeral nature of resources and centralized control mechanisms?

A. Network perimeter monitoring B. Physical hardware access C. Management plane activity logs D. Endpoint protection status

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

When investigating an incident in an Infrastructure as a Service (IaaS) environment, what can the user investigate on their own?

A. The logs of all customers in a multi-tenant cloud B. The network components controlled by the CSP C. The CSP server facility D. The CSP office spaces E. Their own virtual instances in the cloud

Discussion 0

Correct Answer: E Vote an answer

Question 9

Which of the following best describes the multi-tenant nature of cloud computing?

A. Cloud customers share a common pool of resources but are segregated and isolated from each other B. Cloud customers share resources without any segregation or isolation C. Cloud customers operate independently without sharing resources D. Multiple cloud customers are allocated a set of dedicated resources via a common web interface

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 10

Which concept provides the abstraction needed for resource pools?

A. Orchestration B. Applistructure C. Hypervisor D. Virtualization E. Metastructure

Discussion 0

Correct Answer: D Vote an answer

Question 11

Which of the following strategies best enhances infrastructure resilience against Cloud Service Provider (CSP) technical failures?

A. Local backup B. High Availability within one data center C. Multi-region resiliency D. Single-region resiliency

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 12

What is a PRIMARY cloud customer responsibility when managing SaaS applications in terms of security and compliance?

A. Generating logs within the SaaS applications B. Providing training sessions for staff on using SaaS tools C. Managing the financial costs of SaaS subscriptions D. Evaluating the security measures and compliance requirements

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 13

What should every cloud customer set up with its cloud service provider (CSP) that can be utilized in the event of an incident?

A. A spill remediation kit B. A communication plan C. A data destruction plan D. A rainy day fund E. A back-up website

Discussion 0

Correct Answer: B Vote an answer

Question 14

What is true of security as it relates to cloud network infrastructure?

A. You should apply cloud firewalls on a per-network basis. B. You should implement a default deny with cloud firewalls. C. You should implement a default allow with cloud firewalls and then restrict as necessary. D. You should always open traffic between workloads in the same virtual subnet for better visibility. E. You should deploy your cloud firewalls identical to the existing firewalls.

Discussion 0

Correct Answer: B Vote an answer

Cloud Security Alliance Certificate of Cloud Security Knowledge v5 (CCSKv5.0) - CCSK Exam Practice Test