Prepare CCSK Question Answers - CCSK Exam Dumps
Real Cloud Security Alliance CCSK Exam Questions [Updated 2021]
How to study the Certificate of Cloud Security Knowledge (CCSK) Exam
The CSA Security Guidelines for Sensitive Areas of Focus in Cloud Computing v4, English edition, ENISA Report ‘Cloud Computing: Advantages, Threats and Recommendations for Information Security’ is the body of knowledge for the CCSK review.
Several resources are available for study. To get a solid understanding of the course contents, we recommend checking out the CCSK dumps available at the certificate-questions website that can be accessed via the link at the bottom of this document. The CSA Security Guidance can be accessed from here and is the definitive guide to keeping the cloud safe for your company. As an ever-evolving technology, the rise of cloud computing brings with it a range of opportunities and challenges. This paper offers both guidance and encouragement to support business objectives while managing and minimizing the risks associated with cloud computing technology adoption. This new edition covers developments in cloud, security, and technology support; focuses on cloud security activities in the real world; integrates the latest CSA research projects; and provides guidelines for relevant technologies.
The Cloud Controls Matrix (CCM) can be accessed from here. The CSA Cloud Controls Matrix (CCM) offers a comprehensive understanding of the concepts and values of security consistent with the domains of Security Guidelines v.4. It offers basic security concepts to direct cloud vendors as they build service offerings and assist prospective cloud customers in determining a cloud provider’s overall security risk.
Cloud Security Alliance offers self-study materials, online and in person training for the exam so definitely check out and complete these training. The CCSK practice tests available have proven to be the best learning materials and have ensured unbelievable passing rates in the past years. So definitely check out the CCSK exam dumps before you appear for the exam.
NEW QUESTION 15
Operating System management is done by customer in which service model of cloud computing?
- A. XaaS
- B. SaaS
- C. IaaS
- D. PaaS
Answer: C
Explanation:
In IaaS model. operating system is managed by the customer
NEW QUESTION 16
NIST defines five characteristics of cloud computing- Rapid Elasticity, Broad Network Access, 0n demand self-service, Metered Usage & Resource pooling. However, IS0/lEC17788 mentions one more characteristic in addition is those 5. Which of the following is that characterstic?
- A. Multitenancy
- B. Segregation
- C. Isolation
- D. Automation
Answer: A
Explanation:
IS0/lEC17788 lists six key characteristics. the first five of which are identical to the NIST characteristics.
The only addition is multitenancy. which is distinct from resource pooling.
Ref: CSA Security Guidelines V4.0
NEW QUESTION 17
Sending data to a provider's storage over an API is likely as much more reliable and secure than setting up your own SFTP server on a VM in the same provider
- A. False
- B. True
Answer: B
NEW QUESTION 18
Where does the private cloud reside?
- A. Off-premise
- B. On-premise or off-premise
- C. On-premise
- D. Remote
Answer: B
Explanation:
According to CSA security guide lines. although. private cloud is for organisation's own use. it can reside on-site or off-premise as well.
NEW QUESTION 19
REST APIs are the standard for web-based services because they run over HTTPS and work well across diverse environments.
- A. False
- B. True
Answer: B
NEW QUESTION 20
Which of the following is a responsibility of Cloud customer?
- A. Isolation
- B. Meta Structure
- C. Secure Virtualization Infrastructure
- D. Image Asset Management
Answer: D
Explanation:
Image asset management. Cloud compute deployments are based on master images-be it a virtual machine, container, or other code-that are then run in the cloud. This is often highly automated and results in a larger number of images to base assets on, compared to traditional computing master images. Managing these-including which meet security requirements, where they can be deployed, and who has access to them-is an important security responsibility.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION 21
Ben was working on a project and hosted all its data on a public cloud. The project is now complete and he wants to remove the data Which of the following is best option for him in order to leave no remanence?
- A. Data-overwriting
- B. Physically destroy the media
- C. Cryptographic erasure
- D. Zeroing
Answer: C
Explanation:
All the options given are correct methods of destroying data but when it comes to data in cloud. the most suitable method is cryptographic erasure.
Definition: Cryptographic Erasure
Cryptographic erasure is the process of using encryption software (either built-in or deployed) on the entire data storage device. and erasing the key used to decrypt the data.
NEW QUESTION 22
Which of the following is NOT a component of Software Defined Perimeter as defined by Cloud Security Alliance Working group on SDP?
- A. SDP Client
- B. SDP Host
- C. SDP Gateway
- D. SDP Controller
Answer: B
Explanation:
The CSA Software Defined Perimeter Working Group has developed a model and specification that combines device and user authentication to dynamically provision network access to resources and enhance security. SDP includes three components:
An SDP client on the connecting asset (e.g. a laptop).
* The SDP controller for authenticating and authorizing SDP clients and configuring the connections to SDP gateways.
* The SDP gateway for terminating SDP client network traffic and enforcing policies in communication with the SDP controller. Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION 23
Your SLA with your cloud provider ensures continuity for all services.
- A. False
- B. True
Answer: A
Explanation:
Explanation
NEW QUESTION 24
What refers refer the model that allows customers to scale their computer and/ or storage needs with little or no intervention from or prior communication with the provider. The services happen in real time?
- A. On-demand self-service
- B. Resource pooling
- C. Rapid elasticity
- D. Broad network access
Answer: A
Explanation:
It is the characteristic of 0n-demand self-service that allows customers to scale their computer and/ or storage needs with little or no intervention from or prior communication with the provider
NEW QUESTION 25
CCM: In the CCM tool, a is a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.
- A. Risk Impact
- B. Control Specification
- C. Domain
Answer: B
NEW QUESTION 26
Which of the following pose the biggest risk in the organization?
- A. People
- B. Access Controls
- C. Technology
- D. DDoS Attacks
Answer: A
Explanation:
People pose the biggest risk in the organization.
People form the biggest risk as they can expose the sensitive data accidentally or on purpose.
Disgruntled employees or careless employees form a great threat to the organization.
NEW QUESTION 27
Which of the following is the correct pair of risk management standards?
- A. ISO27001 & ISO27018
- B. ISO27005 & ISO31000
- C. ISO27002 & ISO27005
- D. ISO31000 & ISO27017
Answer: B
Explanation:
IS027005 refers to processes for IT Risk Management whereas ISO31000 refers to Enterprise Risk Management
NEW QUESTION 28
Which one of the following is an example of misuse or abuse of cloud services?
- A. DDoS Attack
- B. XSS attacks
- C. Account Hijacking
- D. Honeypot
Answer: A
Explanation:
Public cloud platform can be used to launch DDoS attack on other platforms.
Please note here and understand the meaning of phrase "abuse or misuse of cloud Services" This phrase means to launch attacks or campaign by using cloud as a platform. mostly. public cloud.
NEW QUESTION 29
Which of the following document defines the roles and responsibilities for risk management between a cloud provider and a cloud customer?
- A. Service Level Agreement
- B. Risk Management Agreement
- C. Operational level Agreement
- D. Contract
Answer: D
Explanation:
Contract defines defines the roles and responsibilities for risk management between a cloud provider and a cloud customer
NEW QUESTION 30
What is true of security as it relates to cloud network infrastructure?
- A. You should implement a default deny with cloud firewalls.
- B. You should always open traffic between workloads in the same virtual subnet for better visibility.
- C. You should apply cloud firewalls on a per-network basis.
- D. You should deploy your cloud firewalls identical to the existing firewalls.
- E. You should implement a default allow with cloud firewalls and then restrict as necessary.
Answer: A
NEW QUESTION 31
Which of the following is NOT part of Risk management process?
- A. Dealing
- B. Framing
- C. Responding
- D. Assessing
Answer: A
Explanation:
The risk-management process has four components
1. Framing risk
2. Assessing risk
3. Responding to risk
4. Monitoring risk
NEW QUESTION 32
Lack of standard data formats and service interfaces can lead to:
- A. Denial of Service
- B. API Mis-management
- C. Vendor lock out
- D. Vendor lock in
Answer: D
Explanation:
Lack of tools, procedures or standard data formats or services interfaces that could guarantee data and service portability, makes it extremely difficult for a customer to migrate from one provider to another, or to migrate data and services to or from an in-House IT environment.
NEW QUESTION 33
Which is the primary tool used to manage identity and access management of resources spread across hundreds of different clouds and resources?
- A. Entitlement Matrix
- B. Federation
- C. Active Directory
- D. SAML 2.0
Answer: B
Explanation:
In cloud computing, the fundamental problem is that multiple organizations are now managing the identity and access management to resources, which can greatly complicate the process. For example, imagine having to provision the same user on dozens-or hundreds-of different cloud services.
Federation is the primary tool used to manage this problem, by building trust relationships between organizations and enforcing them through standards-based technologies.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION 34
What is the process to determine any weaknesses in the application and the potential ingress, egress, and actors involved before the weakness is introduced to production?
- A. Vulnerability Assessment
- B. STRIDE
- C. Threat Detection
- D. Threat Modelling
Answer: D
Explanation:
Threat modelling is performed once an application design is created. The goal of threat modelling is to determine any weaknesses in the application and the potential ingress, egress, and actors involved before the weakness is introduced to production. It is the overall attack surface that is amplified by the cloud, and the threat model has to take that into account.
NEW QUESTION 35
......
Introduction to Certificate of Cloud Security Knowledge (CCSK) Exam
Learn the core concepts, best practices, and recommendations for securing an organization on the cloud regardless of the provider or platform. Covering all the 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage the information from CSA’s vendor-neutral research to keep data secure on the cloud.
They need information security experts who are cloud-savvy as companies move to the cloud. The CCSK certificate is generally accepted as the cloud protection standard of expertise and gives you the foundations you need to protect data in the cloud. It is your decision on how you choose to draw on that experience.
The certification has the following objectives. These objectives can be fulfilled by carefully studying the CCSk dumps:
- Compared to internationally agreed requirements, the knowledge to build a comprehensive cloud protection program effectively
- Recommendations from the cloud guidelines of the European Union Agency for Network and Information Security (ENISA)
- An in-depth understanding of cloud computing’s full capabilities
- Using the cloud-specific governance & enforcement tool, how to determine the protection of cloud providers and your organization: Cloud Controls Matrix
CCSK Exam Dumps Pass with Updated 2021: https://www.testkingit.com/Cloud-Security-Alliance/latest-CCSK-exam-dumps.html
Free CCSK Exam Dumps to Pass Exam Easily: https://drive.google.com/open?id=1N8TkeFqPRToz9ixxFDSKxIvk8r5b2oqT