Free CCSK Sample Questions and 100% Cover Real Exam Questions (Updated 300 Questions)
Download Real Cloud Security Alliance CCSK Exam Dumps Test Engine Exam Questions
What is the duration, language, and format of the Certificate of Cloud Security Knowledge (CCSK) Exam
- Number of questions: 60
- Language of Exam: English, Spanish
- Format: Multiple Choice Questions
- Passing score: 80%
- Time Allowed: 90 minutes
NEW QUESTION 80
Ensuring the use of data and information complies with organizational policies, standards and strategy- including regulatory, contractual, and business objectives, known as:
- A. Corporate Governance
- B. Data Governance
- C. IT Governance
- D. Enterprise Governance
Answer: B
Explanation:
It is definition of Data Governance
NEW QUESTION 81
What is defined as the process by which an opposing party may obtain private documents for use in litigation?
- A. Discovery
- B. Risk Assessment
- C. Custody
- D. Subpoena
- E. Scope
Answer: A
NEW QUESTION 82
An inherent weakness in an information system. security procedures. internal controls, or implementation that could be exploited by a threat source.
- A. ARO
- B. Risk
- C. Vulnerbility
- D. Threat
Answer: C
Explanation:
Thats the definition of vulnerbility
NEW QUESTION 83
John's Laptop was stolen. He had saved all his passwords in a text file stored in his laptop. Adversary used the passwords from the text file and gained access to company's network and sensitive databases, of which John was the data base administrator. It resulted in theft of thousands of customer information. This incident could have been prevented by?
- A. Web Application Firewall
- B. Monitoring through SIEM device
- C. Data Loss Prevention Implementation
- D. Using multi-factor authentication
Answer: D
Explanation:
Use of multifactor authentication would have prevented adversary from logging in to the system. Other mechanisms would not help as they will see traffic coming from legimitate user.
NEW QUESTION 84
ln which service model. does cloud security provider has least responsibility?
- A. IaaS
- B. SaaS
- C. XaaS
- D. PaaS
Answer: A
Explanation:
In IaaS service model. CSP is responsible only for the physical infrastructure.
NEW QUESTION 85
Which of the following is key benefit of private cloud model?
- A. Off-loading IT Management
- B. Less expensive
- C. Distributed data location
- D. Assurance of Data Location
Answer: D
Explanation:
One of the key challenges in cloud computing is its distributed environment and dispersed data centers across the globe. It is very difficult to trace data location in public clouds.
Therefore. Assurance of data location is key advantage of private cloud.
NEW QUESTION 86
Which of the following Standards define "Application Security Management Process" (ASMP)?
- A. ISO 27034-1
- B. ISO 27032-1
- C. ISO 27036-1
- D. ISO 27038-1
Answer: A
Explanation:
The International Organization for Standardization(ISO) has developed and published ISO/ IECN27034-1,
"Information Technology, eSecurity Techniques, eApplication Security, IS0/ IEC27034-1 defines concepts, frameworks, and processes to help organizations integrate security within their software development lifecycle.
NEW QUESTION 87
What is a type of computing comparable to grid computing that relies on sharing computing resources rather than having local servers or personal devices to handle applications?
- A. Server hosting
- B. Vertical computing
- C. Traditional computing
- D. Cloud computing
Answer: D
Explanation:
Thats the definition of cloud computing
NEW QUESTION 88
In Platform as a Service (PaaS), platform security is a responsibility of:
- A. Cloud service provider
- B. Customer
- C. It's a shared responsibility
- D. Neither of them
Answer: C
Explanation:
This is a very confusing question and we need to understand that its a shared responsibility between cloud service provider and customer.
NEW QUESTION 89
ENISA: Lock-in is ranked as a high risk in ENISA research, a key underlying vulnerability causing lock in is:
- A. Unclear asset ownership
- B. Lack of completeness and transparency in terms of use
- C. Lack of information on jurisdictions
- D. Audit or certification not available to customers
- E. No source escrow agreement
Answer: B
NEW QUESTION 90
CCM: In the CCM tool, a is a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.
- A. Control Specification
- B. Risk Impact
- C. Domain
Answer: A
NEW QUESTION 91
All cloud services utilize virtualization technologies.
- A. True
- B. False
Answer: A
NEW QUESTION 92
One of the main reasons and advantage of having external audit is:
- A. Internal staff is less qualified than external auditors.
- B. Better tools used by external provider
- C. Its independent
- D. Its cheaper
Answer: C
Explanation:
All other answers are distractors. One of the primary reasons of doing external auditing is the independence of auditors.
NEW QUESTION 93
Which one of the following is NOT one of phases for cloud auditing?
- A. Define Audit objectives
- B. Report lesson learned
- C. Conduct Audit
- D. Report data breaches
Answer: D
Explanation:
Reporting data breaches is not part of Auditing and not a function of Auditors.
NEW QUESTION 94
When virtual machines may communicate with each other over a hardware backplane, Rather than a network, It gives rise to:
- A. Multi-tenancy
- B. Inter VM attack
- C. Blind spot
- D. DDoS
Answer: C
Explanation:
It's the definition of Blind spot and it is very difficult to monitor this traffic.
NEW QUESTION 95
As with security. compliance in the cloud is a shared responsibility model.
- A. True
- B. False
Answer: A
Explanation:
As with security. compliance in the cloud is a shared responsibility model. Both the cloud provider and customer have responsibilities. But the customer is always ultimately responsible for their own compliance. These responsibilities are defined through contracts, audits/assessments. and specifics of the compliance requirements.
Reference: CSA Security Guidelines V.4(reproduced here for the educational purpose)
NEW QUESTION 96
Which of the following is NOT a characteristic of cloud computing?
- A. On-demand self service
- B. Resource Pooling
- C. Reduced personnel cost
- D. Metered service
Answer: C
Explanation:
The characteristics of cloud computing are
1. 0n-demand self-service: A consumer can unilaterally provision computing capabilities, such as server time and network storage, as needed automatically without requiring human interaction with each service provider.
2. Broad network access: Capabilities are available over the network and accessed through standard mechanisms that promote use by heterogeneous thin or thick client platforms(e.g, mobile phones, tablets, laptops and workstations).
3. Resource pooling: The provider's computing resources are pooled to serve multiple consumers using a multi-tenant model, with different physical and virtual resources dynamically assigned and reassigned according to consumer demand. There is a sense of location independence in that the customer generally has no control or knowledge over the exact location of the provided resources but may be able to specify location at a higher level of abstraction(e.g, country, state or datacenter).
Examples of resources include storage, processing, memory and network bandwidth.
4. Rapid elasticity: Capabilities can be elastically provisioned and released, in some cases automatically, to scale rapidly outward and inward commensurate with demand. To the consumer, the capabilities available for provisioning often appear to be unlimited and can be appropriated in any quantity at anytime.
5. Measured service: Cloud systems automatically control and optimize resource use by leveraging a metering capability at some level of abstraction appropriate to the type of service(e.g, storage, processing, bandwidth and active user accounts).
Resource usage can be monitored, controlled and reported, providing transparency for the provider and consumer.
NEW QUESTION 97
......
New CCSK exam dumps Use Updated Cloud Security Alliance Exam: https://www.practicematerial.com/CCSK-exam-materials.html
Verified CCSK Dumps Q&As - CCSK Test Engine with Correct Answers: https://drive.google.com/open?id=1aD-aMGIrO9lNwRGmtz7qfJFEfMcuXtAk
