Cloud Security Alliance Certificate of Cloud Security Knowledge v5 (CCSKv5.0) - CCSK FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

In the context of cloud workload security, which feature directly contributes to enhanced performance and resource utilization without incurring excess costs?

A. Increased on-premise hardware B. Elasticity of cloud resources C. Unlimited data storage capacity D. Fixed resource allocations

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

CCM: A hypothetical start-up company called "ABC" provides a cloud based IT management solution. They are growing rapidly and therefore need to put controls in place in order to manage any changes in their production environment. Which of the following Change Control & Configuration Management production environment specific control should they implement in this scenario?

A. None of the above B. Policies and procedures shall be established for managing the risks associated with applying changes to business-critical or customer (tenant)-impacting (physical and virtual) applications and system-system interface (API) designs and configurations, infrastructure network and systems components. C. All cloud-based services used by the company's mobile devices or BYOD shall be pre-approved for usage and the storage of company business data. D. Policies and procedures shall be established, and supporting business processes and technical measures implemented, to restrict the installation of unauthorized software on organizationally- owned ormanaged user end-point devices (e.g. issued workstations, laptops, and mobile devices) and IT infrastructure network and systems components.

Discussion 0

Correct Answer: B Vote an answer

Question 3

What are the most important practices for reducing vulnerabilities in virtual machines (VMs) in a cloud environment?

A. Encryption for data at rest and software bill of materials B. Using secure base images, patch and configuration management C. Disabling unnecessary VM services and using containers D. Network isolation and monitoring

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

In the IaaS shared responsibility model, which responsibility typically falls on the Cloud Service Provider (CSP)?

A. Managing application code B. Configuring firewall rules C. Ensuring physical security of data centers D. Encrypting data at rest

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

Which practice minimizes human error in long-running cloud workloads' security management?

A. Restricting access to workload configurations B. Increasing manual security audits frequency C. Implementing automated security and compliance checks D. Converting all workloads to ephemeral

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Your cloud and on-premises infrastructures should always use the same network address ranges.

A. True B. False

Discussion 0

Correct Answer: B Vote an answer

Question 7

An important consideration when performing a remote vulnerability test of a cloud-based application is to

A. Schedule vulnerability test at night B. Use network layer testing tools exclusively C. Obtain provider permission for test D. Use techniques to evade cloud provider's detection systems E. Use application layer testing tools exclusively

Discussion 0

Correct Answer: C Vote an answer

Question 8

What is the primary purpose of Identity and Access Management (IAM) systems in a cloud environment?

A. To monitor network traffic for suspicious activity B. To provide a backup solution for cloud data C. To govern identities' access to resources in the cloud D. To encrypt data to ensure its confidentiality

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

What method can be utilized along with data fragmentation to enhance security?

A. Insulation B. Encryption C. Knowledge management D. Organization E. IDS

Discussion 0

Correct Answer: A Vote an answer

Question 10

ENISA: An example high risk role for malicious insiders within a Cloud Provider includes

A. Marketing B. Legal counsel C. Accounting D. Auditors E. Sales

Discussion 0

Correct Answer: D Vote an answer

Question 11

Which type of hypervisor runs directly on physical hardware without an underlying host operating system?

A. Container runtime B. Type 1 (bare-metal) hypervisor C. Application hypervisor D. Type 2 (hosted) hypervisor

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 12

CCM: Cloud Controls Matrix (CCM) is a completely independent cloud assessment toolkit that does not map any existing standards.

A. True B. False

Discussion 0

Correct Answer: B Vote an answer

Question 13

In federated identity management, what role does the identity provider (IdP) play in relation to the relying party?

A. The IdP makes assertions to the relying party after building a trust relationship. B. The relying party makes assertions to the IdP about user authorizations. C. The IdP relies on the relying party to authenticate and authorize users. D. The IdP and relying party have no direct trust relationship.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 14

What is a core tenant of risk management?

A. The provider is accountable for all risk management. B. The consumers are completely responsible for all risk. C. Risk insurance covers all financial losses, including loss ofcustomers. D. If there is still residual risk after assessments and controls are inplace, you must accept the risk. E. You can manage, transfer, accept, or avoid risks.

Discussion 0

Correct Answer: E Vote an answer