Easily To Pass New CCSK Verified & Correct Answers [Jul 07, 2022
Free CCSK Exam Files Downloaded Instantly
How to Prepare For Certificate of Cloud Security Knowledge (CCSK) Exam
Preparation Guide for the Certificate of Cloud Security Knowledge (CCSK) Exam
Introduction
The Cloud Security Alliance (CSA) is a non-profit organization to promote the use of best practices in Cloud Computing to provide security assurance and providing training on the use of cloud computing to help secure all other forms of computing.
The Cloud Security Alliance (CSA) is the leading association in the world committed to identifying and raising awareness of best practices to help ensure a safe environment for cloud computing. Worldwide, the CSA has over 80,000 individual members. In 2011, when the American Presidential Administration chose the CSA Summit as the venue for announcing the cloud computing policy of the federal government, CSA acquired a major reputation.
The purpose of this exam guide is to provide you with all the required exam information and to help you prepare successfully for the Certificate of Cloud Security Knowledge CCSk exam tests. This guide provides information on the target audience of the certification test, suggested training and documentation, and a comprehensive list of exam objectives, all to help you get a passing score. To boost your chances of passing the test, find the CCSk exam dumps from the links provided.
NEW QUESTION 94
Due to multi-tenancy nature of cloud. there is the possibility that data belonging to one customer will be read or received by another. This is known as:
- A. Information Bleed
- B. Data disclosure
- C. Wilful data disclosure
- D. Data dispersion
Answer: A
Explanation:
Information Bleed With multiple customers processing and storing data over the same infrastructure, there is the possibility that data belonging to one customer will be read or received by another.
Moreover, even if this does not happen with raw data, it might be possible for one customer to detect telltale information about another customer's activity, such as when the customer is processing data, how long the procedure takes, and so on.
NEW QUESTION 95
When the data is transferred to third party. who is ultimately responsible for security of data?
- A. Cloud Security Broker
- B. Cloud Processor
- C. Cloud Controller
- D. Cloud Service Provider
Answer: C
Explanation:
Whatever will be the scenario. Data controller will be responsible for security of data in cloud
NEW QUESTION 96
Which one is NOT considered as one of the building blocks of the cloud computing?
- A. Networking
- B. Clock
- C. RAM
- D. CPU
Answer: B
Explanation:
The question is asking for an exception by using "NOT"
The building blocks of cloud computing are composed of random access memory (RAM), the central processing unit(CPU), storage, and networking.
NEW QUESTION 97
What is the process to determine any weaknesses in the application and the potential ingress, egress, and actors involved before the weakness is introduced to production?
- A. Threat Detection
- B. Threat Modelling
- C. Vulnerability Assessment
- D. STRIDE
Answer: B
Explanation:
Threat modelling is performed once an application design is created. The goal of threat modelling is to determine any weaknesses in the application and the potential ingress, egress, and actors involved before the weakness is introduced to production. It is the overall attack surface that is amplified by the cloud, and the threat model has to take that into account.
NEW QUESTION 98
Which of the following statements are NOT requirements of governance and enterprise risk management in a cloud environment?
- A. Negotiate long-term contracts with companies who use well-vetted software application to avoid the transient nature of the cloud environment.
- B. Provide transparency to stakeholders and shareholders demonstrating fiscal solvency and organizational transparency.
- C. Respect the interdependency of the risks inherent in the cloud supply chain and communicate the corporate risk posture and readiness to consumers and dependent parties.
- D. Inspect and account for risks inherited from other members of the cloud supply chain and take active measures to mitigate and contain risks through operational resiliency.
- E. Both B and C.
Answer: A
NEW QUESTION 99
ln which service model. does cloud security provider has least responsibility?
- A. PaaS
- B. IaaS
- C. XaaS
- D. SaaS
Answer: B
Explanation:
In IaaS service model. CSP is responsible only for the physical infrastructure.
NEW QUESTION 100
Which of the following is NOT part of Risk management process?
- A. Dealing
- B. Framing
- C. Assessing
- D. Responding
Answer: A
Explanation:
The risk-management process has four components
1. Framing risk
2. Assessing risk
3. Responding to risk
4. Monitoring risk
NEW QUESTION 101
Exploitable bugs in programs that attackers can use to infiltrate a computer system for the purpose of stealing data, taking control of the system or disrupting service operations, are called:
- A. Vulnerbilities
- B. Threat Agents
- C. Threats
- D. Honepots
Answer: A
NEW QUESTION 102
Which is the correct sequence of Cloud Data lifecycle phases?
- A. Create, Store, Use, Share, Archive, Destroy
- B. Create, Use, Share, Store, Archive, Destroy
- C. Create, Use, Store, Archive, Share, Destroy
- D. Create, Share, Use, Store, Archive, Destroy
Answer: A
Explanation:
The correct order of data lifecycle is Create, Store, Use, Share, Archive, Destroy
NEW QUESTION 103
In which service model, cloud consumer is responsible to manage authorizations and entitlements only?
- A. Infrastructure as a Service (IaaS)
- B. Platform as a Service (PaaS)
- C. All of them
- D. Software as a Service (SaaS)
Answer: D
Explanation:
It is important to read the question carefully and then choose the best answer. Although cloud consumer is responsible for authorizations and entitlements across all service models but questions uses
"only''. Therefore, answer is Software as a Service (SaaS) and a SaaS provider is responsible for perimeter security, logging/ monitoring/auditing, and application security.
NEW QUESTION 104
What refers refer the model that allows customers to scale their computer and/ or storage needs with little or no intervention from or prior communication with the provider. The services happen in real time?
- A. Resource pooling
- B. Broad network access
- C. Rapid elasticity
- D. On-demand self-service
Answer: D
Explanation:
It is the characteristic of 0n-demand self-service that allows customers to scale their computer and/ or storage needs with little or no intervention from or prior communication with the provider
NEW QUESTION 105
The basis for deciding which laws are most appropriate in a situation where conflicting laws exist. refers to:
- A. Criminal law
- B. Tort law
- C. Doctrine of proper law
- D. The Restatement(Second) Conflict of Law
Answer: D
Explanation:
The Restatement(Second) Conflict of Law refers to a collation of developments in common law that help the courts stay up with changes. Many states have conflicting laws. and judges use these restatements to assist them in determining which laws should apply when conflicts occur.
NEW QUESTION 106
What would you call logic/procedures running on a shared database platform as?
- A. Virtual Machine
- B. Platform-based Workload
- C. Container
- D. Serverless Computing
Answer: B
Explanation:
Platform-based workloads: This is a more complex category that covers workloads running on a shared platform that aren't virtual machines or containers, such as logic/procedures running on a shared database platform. Imagine a stored procedure running inside a multitenant database, or a machine- learning job running on a machine-learning Platform as a Service. Isolation and security are totally the responsibility of the platform provider, although the provider may expose certain security options and controls.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION 107
Which of the following is not one of the categories of risks as defined in, ENISA (European Network and Information Security Agency) document on Security risk and recommendation?
- A. Technical Risk
- B. Policy and organisational risk
- C. Environmental Risk
- D. Legal Risk
Answer: C
Explanation:
Environmental Risk are not defined as a category in the ENISA document however. all the other three are defined as categories.
NEW QUESTION 108
Which of the following is a key tool for enabling and enforcing separation and isolation in multitenancy?
- A. Networking
- B. Control Plane
- C. Management Plane
- D. Processors
Answer: C
Explanation:
The management plane is a key tool for enabling and enforcing separation and isolation in multitenancy.
Limiting who can do what with the APIs is one important means for segregating out customers, or different users within a single tenant. Resources are in the pool, out of the pool, and where they are allocated Reference: CSA Security Guidelines V.4(reproduced here for the educational purpose)
NEW QUESTION 109
Who is responsible for the security of the physical infrastructure and virtualization platform?
- A. The cloud provider
- B. The cloud consumer
- C. The responsibility is split equally
- D. The majority is covered by the consumer
- E. It depends on the agreement
Answer: A
NEW QUESTION 110
The individual's right to have data(PII) removed from a entity/ provider at anytime per their request. is known as:
- A. Right of erasure
- B. Right to be forgotten
- C. Right to disclosure
- D. Right to claim
Answer: B
Explanation:
Under this principle of "Right to be forgotten", any individual can notify any entity that has PII fort hat individual and instruct that entity to delete and destroy all of that individual's PII in that entity's control.
This is a very serious and powerful individual right, and compliance can be extremely difficult.
NEW QUESTION 111
A health care facility has to only comply with HIPAA and do not need to comply with PCI DSS.
- A. True
- B. False
Answer: B
Explanation:
This is a tricky question. It is true that health care facility need to comply with HIPAA but if the healthcare facility is processing credit cards, they will have to comply with PCI DSS as well
NEW QUESTION 112
Database as a Service is an example of :
- A. Platform as a Service(PaaS)
- B. Software as a Service(SaaS)
- C. Infrastructure as a Service(IaaS)
- D. Program as a Service(PaaS)
Answer: A
Explanation:
One option. frequently seen in the real world and illustrated in our model. is to build a platform on top of IaaS. A layer of integration and middleware is built on IaaS. then pooled together. orchestrated. and exposed to customers using APIs as PaaS. For example, a Database as a Service could be built by deploying modified database management system software on instances running in IaaS. The customer manages the database via API (and a web console) and accesses it either through the normal database network protocols, or, again, via API.
Ref: CSA Security Guidelines V4.0
NEW QUESTION 113
Which of the following storages is typically used for swap files and other temporary storage needs and is terminated with its instance?
- A. Ephemeral Storage
- B. Raw Storage
- C. Content Deliver
- D. Object based Storage
Answer: A
Explanation:
Ephemeral storage: This type of storage is relevant for SaaS instances and exists only as long as its instance is up. It is typically used for swap files and other temporary storage needs and is terminated with its instance.
NEW QUESTION 114
According to Cloud Security Alliance logical model of cloud computing, which of the following defines the protocols and mechanisms that provide the interface between the infrastructure layer and the other layers.
- A. Metastructure
- B. Infrastructure
- C. Infostructure
- D. Applistructure
Answer: A
Explanation:
According to CSA Securityguidelines4.0. Metastucture is defined as the protocols and mechanisms that provide the interface between the infrastructure layer and the other layers. The glue that ties the technologies and enables management and configuration.
NEW QUESTION 115
One of the key technologies that have made cloud computing viable is:
- A. VLANs
- B. Distributed networking
- C. Storage controllers
- D. Virtualization
Answer: D
Explanation:
Virtualization technologies enable cloud computing to become a real and scalable service offering due to the savings, sharing, and allocations of resources across multiple tenants and environments.
NEW QUESTION 116
......
100% Pass Guaranteed Free CCSK Exam Dumps: https://www.exam4free.com/CCSK-valid-dumps.html
Verified & Latest CCSK Dump Q&As with Correct Answers: https://drive.google.com/open?id=1BmMQg8qUR0spK6tzmhDVPKHLdpW_XYzy
