Prepare With Top Rated High-quality CCSK Dumps For Success in CCSK Exam
CCSK Free Certification Exam Easy to Download PDF Format 2023
NEW QUESTION # 65
Which of the below hypervisors are 0S based and are more attractive to attackers?
- A. Type II
- B. Type III
- C. Type V
- D. Type I
Answer: A
Explanation:
Type II hypervisors are 0S-based and more attractive to attackers. There are lot of vulnerabilities which are found not only on 0S but also in applications residing on the 0S.
NEW QUESTION # 66
Like security and compliance. BC/DR is not a shared responsibility.
- A. True
- B. False
Answer: A
Explanation:
This is True
Like security and compliance, BC/DR is a shared responsibility. There are aspects that the cloud provider has to manage, but the cloud customer is also ultimately responsible for how they use and manage the cloud service. This is especially true when planning for outages of the cloud provider (or parts of the cloud provider's service).
Ref Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION # 67
Lack of standard data formats and service interfaces can lead to:
- A. Vendor lock in
- B. Vendor lock out
- C. API Mis-management
- D. Denial of Service
Answer: A
Explanation:
Lack of tools, procedures or standard data formats or services interfaces that could guarantee data and service portability, makes it extremely difficult for a customer to migrate from one provider to another, or to migrate data and services to or from an in-House IT environment.
NEW QUESTION # 68
CCM: A hypothetical company called: "Health4Sure" is located in the United States and provides cloud based services for tracking patient health. The company is compliant with HIPAA/HITECH Act among other industry standards. Health4Sure decides to assess the overall security of their cloud service against the CCM toolkit so that they will be able to present this document to potential clients.
Which of the following approach would be most suitable to assess the overall security posture of Health4Sure's cloud service?
- A. The CCM domains are not mapped to HIPAA/HITECH Act. Therefore Health4Sure should assess the security posture of their cloud service against each and every control in the CCM. This approach will allow a thorough assessment of the security posture.
- B. The CCM columns are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered ad a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls. This approach will save time.
- C. The CCM domain controls are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered as a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls thoroughly. This approach saves time while being able to assess the company's overall security posture in an efficient manner.
Answer: A
NEW QUESTION # 69
Operating System management is done by customer in which service model of cloud computing?
- A. PaaS
- B. IaaS
- C. XaaS
- D. SaaS
Answer: B
Explanation:
In IaaS model. operating system is managed by the customer
NEW QUESTION # 70
According to ENISA(European Network and Information Security Agency) document on Security risk and recommendation. Isolation Failure is:
- A. Technical Risk
- B. Compliance Risk
- C. Organizational Risk
- D. Management Risk
Answer: A
Explanation:
Isolation failure is defined as:
Multi-tenancy and shared resources are two of the defining characteristics of cloud computing environments. Computing capacity, storage, and network are shared between multiple users. This class of risks includes the failure of mechanisms separating storage, memory, routing, and even reputation between different tenants of the shared infrastructure(e.g, so-called guest-hopping attacks, SQL injection attacks exposing multiple customers' data stored in the same table, and side channel attacks).
NEW QUESTION # 71
Exploitable bugs in programs that attackers can use to infiltrate a computer system for the purpose of stealing data, taking control of the system or disrupting service operations, are called:
- A. Honepots
- B. Threats
- C. Vulnerbilities
- D. Threat Agents
Answer: C
Explanation:
It's a definition of System Vulnerability.
NEW QUESTION # 72
Which of the following controls and configures the metastructure, and is also part of the metastructure itself?
- A. Web Application Firewall
- B. API Gateway
- C. Management Plance
- D. Network Firewall
Answer: C
Explanation:
The management plane controls and configures the metastructure, and is also part of the metastructure itself. As a reminder, cloud computing is the act of taking physical assets (like networks and processors) and using them to build resource pools. Meta structure is the glue and guts to create, provision, and deprovision the pools. The management plane includes the interfaces for building and managing the cloud itself, but also the interfaces for cloud users to manage their own allocated resources of the cloud.
Ref: CSA Security Guidelines v4.0
NEW QUESTION # 73
What are the primary security responsibilities of the cloud provider in the management infrastructure?
- A. Configuring second factor authentication across the network
- B. Properly configuring the deployment of the virtual network, except the firewalls
- C. Properly configuring the deployment of the virtual network, especially the firewalls
- D. Providing as many API endpoints as possible for custom access and configurations
- E. Building and properly configuring a secure network infrastructure
Answer: B
NEW QUESTION # 74
The basis for deciding which laws are most appropriate in a situation where conflicting laws exist. refers to:
- A. Doctrine of proper law
- B. The Restatement(Second) Conflict of Law
- C. Tort law
- D. Criminal law
Answer: B
Explanation:
The Restatement(Second) Conflict of Law refers to a collation of developments in common law that help the courts stay up with changes. Many states have conflicting laws. and judges use these restatements to assist them in determining which laws should apply when conflicts occur.
NEW QUESTION # 75
Cloud Security provider is responsible for Platform Security in Platform as a Service(PaaS) model.
- A. False
- B. True
Answer: A
Explanation:
It is false. Platform security is a shared responsibility between cloud service provider and cloud service customer in Platform as a Service(PaaS) model.
NEW QUESTION # 76
All cloud services utilize virtualization technologies.
- A. True
- B. False
Answer: A
NEW QUESTION # 77
Whose responsibility is to maintain Data Loss Prevention mechanisms in SaaS(Software as a Service) model ?
- A. Cloud Carrier
- B. Cloud Service provider
- C. Cloud Access Security Broker
- D. Cloud Customer
Answer: B
Explanation:
Although clouds customer is legally responsible for data that he stores on the cloud but Cloud Service Provider has to maintain data loss prevention mechanisms
NEW QUESTION # 78
Which of the following can lead to vendor lock-in?
- A. CSP's vendor utilisation
- B. Big Data sets
- C. Lack of transparency in terms of use
- D. Large supplier Redundancy
Answer: C
Explanation:
Lack of transparency in terms of use can lead to vendor lock-in. Contracts and SLAs should clearly define the relationship between Cloud Service Provider(CSP)and the cloud customer. Clause of data portability should be there.
NEW QUESTION # 79
Which of the following leverages virtual network topologies to run more. smaller. and more isolated networks without incurring additional hardware costs that historically make such models prohibitive?
- A. Micro LANs
- B. BitVLANS
- C. Micro segmentation
- D. VLANS
Answer: C
Explanation:
Micro segmentation(also sometimes referred to as hyper segregation) leverages virtual network topologies to run more, smaller, and more isolated networks without incurring additional hardware costs that historically make such models prohibitive. Since the entire networks are defined in software without many of the traditional addressing issues, it is far more feasible to run these multiple, software- defined environments.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION # 80
Which of the following is a key consideration in Data security but does not feature in Data Security Life cycle?
- A. Storage protocol
- B. Access Method
- C. Storage Device
- D. Storage Location
Answer: D
Explanation:
The lifecycle represents the phases information passes through but doesnt address its location or how it is accessed.
NEW QUESTION # 81
Which is the primary tool for governance in Cloud Computing environment?
- A. Service Level Agreement
- B. Governance memo
- C. Operational level Agreement
- D. Contract
Answer: C
Explanation:
Contracts: The primary tool of governance is the contract between a cloud provider and a cloud customer(this is true for public and private cloud). The contract is your only guarantee of any level of service or commitment-assuming there is no breach of contract, which tosses everything into a legal scenario. Contracts are the primary tool to extend governance into business partners and providers.
Ref: Security Guidance v4.0 Copyright2017, Cloud Security Alliance(used for educational purpose here)
NEW QUESTION # 82
When creating business strategies for cloud migration. which is the most important aspect?
- A. Valuating current staff for their capabilities
- B. Choosing the right auditor
- C. Due Diligence when inspecting technologies and choosing cloud provider
- D. Hiring a cloud broker
Answer: C
Explanation:
Due Diligence is most important aspect when considering adoption to the cloud
NEW QUESTION # 83
Which of the following is an effective way of segregating different cloud networks and datacenters in a hybrid cloud environment?
- A. Bastion Virtual Network
- B. Virtual Private Networks
- C. Virtual LANs
- D. Dedicated Hosting
Answer: A
Explanation:
One emerging architecture for hybrid cloud connectivity is "bastion" or "transit" virtual networks:
. This scenario allows you to connect multiple, different cloud networks to a data center using a single hybrid connection. The cloud user builds a dedicated virtual network for the hybrid connection and then peers any other networks through the designated bastion network.
. Second-level networks connect to the data center through the bastion network, but since they aren't peered to each other they can't talk to each other and are effectively segregated. Also, you can deploy different security tools, firewall rulesets, and Access Control Lists in the bastion network to further protect traffic in and out of the hybrid connection.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)
NEW QUESTION # 84
The characteristics and traits of an individual that when aggregated could reveal the identity of that person. are known as:
- A. Indirect Identity Marks
- B. Indirect indicators
- C. Indirect Identifiers
- D. Indirect identifications
Answer: C
Explanation:
Indirect identifiers typically consist of demographic or socioeconomic information, dates, or events.
Although each standalone indirect identifier cannot identify the individual, the risk is that combining a number of indirect identifiers with external data can result in exposing the subject of the information.
For example, imagine a scenario in which users were able to combine search engine data, coupled with online streaming recommendations to tie back posts and recommendations to individual users on a website.
NEW QUESTION # 85
What is the key difference between Business Continuity and Business Continuity Management?
- A. They are same concepts used interchangeably
- B. None of the above
- C. Business Continuity is the capability of the organization whereas Business Continuity Management is the holistic process.
- D. Business Continuity is the holistic process whereas Business Continuity Management is the capability of the organization
Answer: C
Explanation:
Definitions:
Business continuity: The capability of the organisation to continue delivery of products or services at acceptable predefined levels following a loss of service.
Business continuity management: A holistic management process that identifies potential threats to an organisation and the impacts to business operations those threats, if realised, might cause. It provides a framework for building organisational resilience with the capability of an effective response that safeguards the interests of its key stakeholders, reputation, brand, and value-creating activities
NEW QUESTION # 86
John said that he is looking for cloud service which is self-serviced and has a on-demand capacity. Which service model is he referring to?
- A. PaaS
- B. IaaS
- C. XaaS
- D. SaaS
Answer: B
Explanation:
Following are the characteristics of IaaS service model of cloud computing:
1. Scale
2. Converged network and IT capacity pool
3. Self-service and on-demand capacity
4. High reliability and resilience
NEW QUESTION # 87
......
Get 100% Success with Latest Cloud Security Knowledge CCSK Exam Dumps: https://www.actual4test.com/CCSK_examcollection.html
The Best CCSK Exam Study Material and Preparation Test Question Dumps: https://drive.google.com/open?id=1KBE0hivIXcFe53NrDaxxbTksJwJUbsio