Give You Free Regular Updates on CCSK Exam Questions Jun 15, 2024
Achieve the CCSK Exam Best Results with Help from Cloud Security Alliance Certified Experts
Who should take the Certificate of Cloud Security Knowledge (CCSK) Exam
For any IT professional working in cloud computing, the CCSK is planned. It's a no-brainer for safety practitioners. As the CCSK is designed to give you a well-rounded view of cloud security, we also see non-security professionals get value from it, particularly developers, IT operations, and audit/compliance.
The exam is targeted for the following people:
- Security Architects
- Solutions Architect
- Information Security
- Security Analyst
Anyone who finds the CCSk exams exam dumps interesting and following their interests should consider getting this certification.
Cloud Security Alliance (CSA) is a non-profit organization that is committed to promoting the use of best practices for providing security assurance in cloud computing. The CSA has developed a comprehensive and vendor-neutral certification program called the Certificate of Cloud Security Knowledge (CCSK) to help organizations and professionals in the IT industry gain a better understanding of cloud security concepts and best practices.
NEW QUESTION # 14
Which is the primary tool used to manage identity and access management of resources spread across hundreds of different clouds and resources?
- A. Active Directory
- B. Federation
- C. Entitlement Matrix
- D. SAML 2.0
Answer: B
Explanation:
In cloud computing, the fundamental problem is that multiple organizations are now managing the identity and access management to resources, which can greatly complicate the process. For example, imagine having to provision the same user on dozens-or hundreds-of different cloud services.
Federation is the primary tool used to manage this problem, by building trust relationships between organizations and enforcing them through standards-based technologies.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION # 15
Private clouds can be hosted off-premises as well.
- A. False
- B. True
Answer: B
Explanation:
It is true. This is how Private cloud is defined.
Private Cloud: The cloud infrastructure is operated solely for a single organization. It may be managed by the organization or by a third party and may be located on-premises or off-premises.
NEW QUESTION # 16
Cloud Security provider is responsible for Platform Security in Platform as a Service(PaaS) model.
- A. True
- B. False
Answer: B
Explanation:
It is false. Platform security is a shared responsibility between cloud service provider and cloud service customer in Platform as a Service(PaaS) model.
NEW QUESTION # 17
Who is responsible for the security of the physical infrastructure and virtualization platform?
- A. The majority is covered by the consumer
- B. It depends on the agreement
- C. The responsibility is split equally
- D. The cloud consumer
- E. The cloud provider
Answer: E
NEW QUESTION # 18
What is the main driver for decision to deploy cloud solutions?
- A. It's a financial decision
- B. None of the above
- C. Its business driven
- D. Cloud has less risks and costs associated
Answer: C
Explanation:
All the decisions related to cloud migration are driven by business requirements and effective Business Impact Analysis(BIA)and cost-benefit analysis
NEW QUESTION # 19
One of the part of STRIDE model is:
- A. Security
- B. Redundancy
- C. Reputation
- D. Denial of Service
Answer: D
Explanation:
The six components that made STRIDE are:
1. Spoofing: Attacker assumes identity of subject
2. Tampering: Data or messages altered by an attacker
3. Repudiation: illegitimate denial of an event
4. Information disclosure: Information obtained without authorization
5. Denial of service: Attacker overloads system to deny legitimate access
6. Elevation of privilege: Attacker gains a privilege level above what is permitted
NEW QUESTION # 20
Which of the following is NOT key Cloud computing characteristics?
- A. Metered pricing
- B. Metered servicing
- C. On Demand self service
- D. Broad Network Access
Answer: B
Explanation:
Often, this type of questions looks simple, but a confusion is created and you need to be careful while picking up the right options ln our case, metered pricing and metered servicing looks similar but Metered pricing is one of the characteristics of cloud computing.
NEW QUESTION # 21
Which of the following is the key difference between cloud computing and traditional virtualization?
- A. Classification
- B. Isolation
- C. Orchestration
- D. Abstraction
Answer: C
Explanation:
Orchestration is the difference between cloud computing and traditional virtualization; virtualization abstracts resources. but it typically lacks the orchestration to pool them together and deliver them to customers on demand. instead relying on manual processes.
Ref: CSA Security Guidelines V4.0
NEW QUESTION # 22
ln order to determine critical assets and processes of the organization, it must first conduct a:
- A. Business Impact Analysis(BIA)
- B. Host hardening
- C. Datacentre monitoring
- D. Risk Assessment
Answer: A
Explanation:
This is a process known as the business impact analysis(BIA). We determine a value for every asset(usually in terms of dollars),,what it would cost the organization if we lost that asset(either temporarily or permanently), what it would cost to replace or repair that asset, and any alternate methods for dealing with that loss.
NEW QUESTION # 23
What would you call logic/procedures running on a shared database platform as?
- A. Serverless Computing
- B. Platform-based Workload
- C. Container
- D. Virtual Machine
Answer: B
Explanation:
Platform-based workloads: This is a more complex category that covers workloads running on a shared platform that aren't virtual machines or containers, such as logic/procedures running on a shared database platform. Imagine a stored procedure running inside a multitenant database, or a machine- learning job running on a machine-learning Platform as a Service. Isolation and security are totally the responsibility of the platform provider, although the provider may expose certain security options and controls.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION # 24
An adversary stole1 million username and passwords of Pass4test LLCs customers. They took advantage of a security vulnerability in the publically accessible application hosted on the cloud. This is an example of:
- A. Data Dispersion
- B. Data breach
- C. Abuse of Cloud Services
- D. Malicious Insider
Answer: B
Explanation:
This is an example of Data Breach. Username and passwords were stolen which were stored as Data.
NEW QUESTION # 25
The Software Defined Perimeter (SDP) includes which components?
- A. Client, Controller, and Firewall
- B. Client, Firewall, and Gateway
- C. Controller, Firewall, and Gateway
- D. Client, Controller, and Gateway
- E. Client, Controller, Firewall, and Gateway
Answer: D
NEW QUESTION # 26
Which of the following is typically a policy set that define ingress and egress rules that can apply to single assets or groups of assets, regardless of network location?
- A. Intrusion Detection System
- B. Database Activity Monitor
- C. Security Groups
- D. API Gateway
Answer: C
Explanation:
SDN firewalls (e.g, security groups) can apply to assets based on more flexible criteria than hardware- based firewalls, since they aren't limited based on physical topology. (Note that this is true of many types of software firewalls, but is distinct from hardware firewalls). SDN firewalls are typically policy sets that define ingress and egress rules that can apply to single assets or groups of assets, regardless of network location (within a given virtual network).
Reference: CSA Security Guidelines V.4 (reproduced here for the educational purpose)
NEW QUESTION # 27
CCM: A hypothetical start-up company called "ABC" provides a cloud based IT management solution. They are growing rapidly and therefore need to put controls in place in order to manage any changes in
their production environment. Which of the following Change Control & Configuration Management production environment specific control should they implement in this scenario?
- A. None of the above
- B. Policies and procedures shall be established, and supporting business processes and technical measures implemented, to restrict the installation of unauthorized software on organizationally-owned or
managed user end-point devices (e.g. issued workstations, laptops, and mobile devices) and IT infrastructure network and systems components. - C. Policies and procedures shall be established for managing the risks associated with applying changes to business-critical or customer (tenant)-impacting (physical and virtual) applications and system-
system interface (API) designs and configurations, infrastructure network and systems components. - D. All cloud-based services used by the company's mobile devices or BYOD shall be pre-approved for usage and the storage of company business data.
Answer: C
NEW QUESTION # 28
The characteristics and traits of an individual that when aggregated could reveal the identity of that person. are known as:
- A. Indirect indicators
- B. Indirect Identity Marks
- C. Indirect Identifiers
- D. Indirect identifications
Answer: C
Explanation:
Indirect identifiers typically consist of demographic or socioeconomic information, dates, or events.
Although each standalone indirect identifier cannot identify the individual, the risk is that combining a number of indirect identifiers with external data can result in exposing the subject of the information.
For example, imagine a scenario in which users were able to combine search engine data, coupled with online streaming recommendations to tie back posts and recommendations to individual users on a website.
NEW QUESTION # 29
Which of the following is not one of the essential characteristics of Cloud Computing?
- A. Rapid elasticit
- B. Resource Sharing
- C. Broad network access
- D. On-demand self service
Answer: B
Explanation:
Resource sharing is not one of the key characteristics of Cloud Computing
NEW QUESTION # 30
Which of the following statements are NOT requirements of governance and enterprise risk management in a cloud environment?
- A. Inspect and account for risks inherited from other members of the cloud supply chain and take active measures to mitigate and contain risks through operational resiliency.
- B. Both B and C.
- C. Respect the interdependency of the risks inherent in the cloud supply chain and communicate the corporate risk posture and readiness to consumers and dependent parties.
- D. Provide transparency to stakeholders and shareholders demonstrating fiscal solvency and organizational transparency.
- E. Negotiate long-term contracts with companies who use well-vetted software application to avoid the transient nature of the cloud environment.
Answer: E
NEW QUESTION # 31
ENISA: A reason for risk concerns of a cloud provider being acquired is:
- A. Provider may change physical location
- B. Arbitrary contract termination by acquiring company
- C. Mass layoffs may occur
- D. Non-binding agreements put at risk
- E. Resource isolation may fail
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION # 32
The intermediary that provides connectivity and transport of cloud services between the CSPs and the cloud service consumers is called:
- A. Cloud Service Broker
- B. Cloud Carrier
- C. Cloud Access Service Broker
- D. Cloud Reseller
Answer: B
Explanation:
All the terms given as options are very important and candidate is expected to know them and differentiate between them
NEW QUESTION # 33
When designing an encryption system, you should start with a threat model.
- A. False
- B. True
Answer: B
NEW QUESTION # 34
What is known as a code execution environment running within an operating system that shares and uses the resources of the operating system?
- A. Platform-based Workload
- B. Virtual machine
- C. Container
- D. Abstraction
- E. Pod
Answer: C
NEW QUESTION # 35
Which of the following are two most effective ways of protection against data breaches in the cloud environment?
- A. Contracts and SLAs
- B. Encryption and Honeypot
- C. Data Loss Prevention techniques and Web Application Firewall
- D. Multifactor Authentication and Encryption
Answer: D
Explanation:
Multifactor Authentication and Encryption are most effective protect mechanisms against data breaches in cloud environment. Other options do form part of overall security strategy in cloud but Option D is the strongest contender for the answer.
NEW QUESTION # 36
......
Detailed New CCSK Exam Questions for Concept Clearance: https://www.latestcram.com/CCSK-exam-cram-questions.html
Provide CCSK Practice Test Engine for Preparation: https://drive.google.com/open?id=1-Aihk77ZEAMFdkFkk_X5kY63AFPksQmi
