Labour Day Sale Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 713PS592

CCSK Certificate of Cloud Security Knowledge (v4.0) Questions and Answers

Questions 4

Vulnerability assessments cannot be easily integrated into CI/CD pipelines because of provider restrictions.

Options:

A.

False

B.

True

Buy Now
Questions 5

What is true of a workload?

Options:

A.

It is a unit of processing that consumes memory

B.

It does not require a hardware stack

C.

It is always a virtual machine

D.

It is configured for specific, established tasks

E.

It must be containerized

Buy Now
Questions 6

CCM: The following list of controls belong to which domain of the CCM?

GRM 06 – Policy GRM 07 – Policy Enforcement GRM 08 – Policy Impact on Risk Assessments GRM 09 – Policy Reviews GRM 10 – Risk Assessments GRM 11 – Risk Management Framework

Options:

A.

Governance and Retention Management

B.

Governance and Risk Management

C.

Governing and Risk Metrics

Buy Now
Questions 7

Why is a service type of network typically isolated on different hardware?

Options:

A.

It requires distinct access controls

B.

It manages resource pools for cloud consumers

C.

It has distinct functions from other networks

D.

It manages the traffic between other networks

E.

It requires unique security

Buy Now
Questions 8

REST APIs are the standard for web-based services because they run over HTTPS and work well across diverse environments.

Options:

A.

False

B.

True

Buy Now
Questions 9

What type of information is contained in the Cloud Security Alliance's Cloud Control Matrix?

Options:

A.

Network traffic rules for cloud environments

B.

A number of requirements to be implemented, based upon numerous standards and regulatory requirements

C.

Federal legal business requirements for all cloud operators

D.

A list of cloud configurations including traffic logic and efficient routes

E.

The command and control management hierarchy of typical cloud company

Buy Now
Questions 10

Which concept provides the abstraction needed for resource pools?

Options:

A.

Virtualization

B.

Applistructure

C.

Hypervisor

D.

Metastructure

E.

Orchestration

Buy Now
Questions 11

Which of the following is NOT a cloud computing characteristic that impacts incidence response?

Options:

A.

The on demand self-service nature of cloud computing environments.

B.

Privacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.

C.

The possibility of data crossing geographic or jurisdictional boundaries.

D.

Object-based storage in a private cloud.

E.

The resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.

Buy Now
Questions 12

What should every cloud customer set up with its cloud service provider (CSP) that can be utilized in the event of an incident?

Options:

A.

A data destruction plan

B.

A communication plan

C.

A back-up website

D.

A spill remediation kit

E.

A rainy day fund

Buy Now
Questions 13

Which opportunity helps reduce common application security issues?

Options:

A.

Elastic infrastructure

B.

Default deny

C.

Decreased use of micro-services

D.

Segregation by default

E.

Fewer serverless configurations

Buy Now
Questions 14

Which governance domain deals with evaluating how cloud computing affects compliance with internal

security policies and various legal requirements, such as regulatory and legislative?

Options:

A.

Legal Issues: Contracts and Electronic Discovery

B.

Infrastructure Security

C.

Compliance and Audit Management

D.

Information Governance

E.

Governance and Enterprise Risk Management

Buy Now
Questions 15

A cloud deployment of two or more unique clouds is known as:

Options:

A.

Infrastructures as a Service

B.

A Private Cloud

C.

A Community Cloud

D.

A Hybrid Cloud

E.

Jericho Cloud Cube Model

Buy Now
Questions 16

Which layer is the most important for securing because it is considered to be the foundation for secure cloud operations?

Options:

A.

Infrastructure

B.

Datastructure

C.

Infostructure

D.

Applistructure

E.

Metastructure

Buy Now
Exam Code: CCSK
Exam Name: Certificate of Cloud Security Knowledge (v4.0)
Last Update: Apr 22, 2024
Questions: 117

PDF + Testing Engine

$66.4  $165.99

Testing Engine

$46  $114.99
buy now CCSK testing engine

PDF (Q&A)

$42  $104.99
buy now CCSK pdf