[Nov 27, 2023] Fully Updated Dumps PDF - Latest CCSK Exam Questions and Answers
100% Free CCSK Exam Dumps to Pass Exam Easily from ITexamReview
The CCSK certification exam is designed for professionals who are responsible for managing cloud security, such as IT managers, security analysts, and consultants. It covers a range of cloud security topics, including cloud architecture, data security, compliance, and legal issues. CCSK exam is based on the CSA's Cloud Security Guidance v4.0 and the ENISA Cloud Computing Risk Assessment report.
NEW QUESTION # 29
One of the purpose of incident response is to minimize the adverse impact on business organizations.
- A. True
- B. False
Answer: A
NEW QUESTION # 30
What is true of searching data across cloud environments?
- A. Search and discovery time is always factored into a contract between the consumer and provider.
- B. You can easily search across your environment using any E-Discovery tool.
- C. You might not have the ability or administrative rights to search or access all hosted data.
- D. The cloud provider must conduct the search with the full administrative controls.
- E. All cloud-hosted email accounts are easily searchable.
Answer: C
NEW QUESTION # 31
Which of the following is NOT a characteristic of Object Storage?
- A. Has additional Metadata
- B. Cannot be accessed through web interface
- C. Accessed through web interface
- D. Stored in cloud
Answer: B
Explanation:
Object storage: Similar to a file share accessed via APIs or a web interface. Examples include Amazon S3 and Rackspace cloud files.
NEW QUESTION # 32
What is the best way to ensure that all data has been removed from a public cloud environment including all media such as back-up tapes?
- A. Keep the keys stored on the client side so that they are secure and so that the users have the ability to delete their own data.
- B. Practice Integration of Duties (IOD) so that everyone is able to delete the encrypted data.
- C. Allowing the cloud provider to manage your keys so that they have the ability to access and delete the data from the main and back-up storage.
- D. Maintaining customer managed key management and revoking or deleting keys from the key management system to prevent the data from being accessed again.
- E. Both B and D.
Answer: D
NEW QUESTION # 33
What of the following is NOT an essential characteristic of cloud computing?
- A. Rapid Elasticity
- B. Broad Network Access
- C. Resource Pooling
- D. Third Party Service
- E. Measured Service
Answer: D
NEW QUESTION # 34
Which concept provides the abstraction needed for resource pools?
- A. Orchestration
- B. Applistructure
- C. Virtualization
- D. Hypervisor
- E. Metastructure
Answer: C
NEW QUESTION # 35
What is a potential concern of using Security-as-a-Service (SecaaS)?
- A. Scaling and costs
- B. Deployment flexibility
- C. Intelligence sharing
- D. Lack of visibility
- E. Insulation of clients
Answer: D
NEW QUESTION # 36
Which of the following decouples the network control plane from the data plane and allows to abstract networking from the tradition a limitations of a LAN?
- A. Traditional Networking
- B. Software defined networking
- C. Converged Networking
- D. VLANS
Answer: B
Explanation:
Software Defined Networking(SDN):A more complete abstraction layer on top of networking hardware, SDNs decouple the network control plane from the data plane(you can read more on SDN principles at this Wikipedia entry).This allows us to abstract networking from the traditional limitations of a LAN.
Reference: CSA Security Guidelines V4.0
NEW QUESTION # 37
Whose responsibility is to maintain Data Loss Prevention mechanisms in SaaS(Software as a Service) model ?
- A. Cloud Customer
- B. Cloud Carrier
- C. Cloud Access Security Broker
- D. Cloud Service provider
Answer: D
Explanation:
Although clouds customer is legally responsible for data that he stores on the cloud but Cloud Service Provider has to maintain data loss prevention mechanisms
NEW QUESTION # 38
Which of the following is most commonly used to program Application Programming Interface(API)?
- A. SOAP
- B. HTTP
- C. REST
- D. JSON
Answer: C
Explanation:
APIs are typically REST for cloud services, since REST is easy to implement across the Internet. REST APIs have become the standard for web-based services since they run over Hl'-P/S and thus work well across diverse environments.
Reference: CSA Security GuidelinesV.4 (reproduced here for the educational purpose)
NEW QUESTION # 39
What does it mean if the system or environment is built automatically from a template?
- A. Nothing.
- B. It depends on how the automation is configured.
- C. Changes made in production are untouched by the next code or template change.
- D. Changes made in test are overwritten by the next code or template change.
- E. Changes made in production are overwritten by the next code or template change.
Answer: D
NEW QUESTION # 40
Which cloud security model type provides generalized templates for helping implement cloud security?
- A. Conceptual models or frameworks
- B. Cloud Controls Matrix (CCM)
- C. Controls models or frameworks
- D. Reference architectures
- E. Design patterns
Answer: D
NEW QUESTION # 41
Where does the encryption engine and key reside when doing file-level encryption?
- A. On the KMS attached to the system
- B. On the instance attached to the system
- C. Encryption engine resides on the server and keys on the client side
- D. On the client side
Answer: B
Explanation:
File-level encryption: Database servers typically reside on volume storage. For this deployment, you are encrypting the volume or folder of the database, with the encryption engine and keys residing on the instances attached to the volume.
External file system encryption protects from media theft, lost backups, and external attack but does not protect against attacks with access to the application layer, the instances 0S, or the data
NEW QUESTION # 42
When designing an encryption system, you should start with a threat model.
- A. True
- B. False
Answer: A
NEW QUESTION # 43
Which of the following is NOT atypical approach of Key Storage in cloud?
- A. Externally managed
- B. Cloud Service Provider Managed
- C. Internally managed
- D. Managed by the Third part
Answer: B
Explanation:
Remember, two key considerations when doing key management
1) Do not save it alongside data
2) Do not let cloud service provider manage the keys
NEW QUESTION # 44
An inherent weakness in an information system. security procedures. internal controls, or implementation that could be exploited by a threat source.
- A. ARO
- B. Threat
- C. Risk
- D. Vulnerbility
Answer: D
Explanation:
Thats the definition of vulnerbility
NEW QUESTION # 45
Which concept is a mapping of an identity, including roles, personas, and attributes, to an authorization?
- A. Authentication
- B. Access control
- C. Authoritative source
- D. Entitlement
- E. Federated Identity Management
Answer: D
NEW QUESTION # 46
Which of the following type of risk assessment most effectively supports cost-benefit analyses of alternative risk responses or courses of action?
- A. Quantitative Analysis
- B. Third party Risk Analysis
- C. Outsourced risk analysis
- D. Qualitative Analysis
Answer: A
Explanation:
Quantitative assessments typically employ a set of methods, principles, or rules for assessing risk based on the use of numbers This type of assessment most effectively supports cost-benefit analyses of alternative risk responses or courses of action.
NEW QUESTION # 47
CCM: The Cloud Service Delivery Model Applicability column in the CCM indicates the applicability of the cloud security control to which of the following elements?
- A. SaaS, PaaS or IaaS
- B. Service Provider or Tenant/Consumer
- C. Mappings to well-known standards and frameworks
- D. Physical, Network, Compute, Storage, Application or Data
Answer: A
NEW QUESTION # 48
......
Free CCSK Exam Questions CCSK Actual Free Exam Questions: https://www.itexamreview.com/CCSK-exam-dumps.html
Verified CCSK dumps and 120 unique questions: https://drive.google.com/open?id=1hM61Gy7vpMfEFGUxSyNf1hBDl9iwuh78
