Cloud Security Alliance Certificate of Cloud Security Knowledge v5 (CCSKv5.0) - CCSK Free Exam Questions

A. Provider infrastructure information including maintenance windows and contracts

B. Full API access to all required services

C. Scope of the assessment and the exact included features and services for the assessment

D. Service-level agreements between all parties

E. Network or architecture diagrams including all end point security devices in use

A. SaaS, PaaS or IaaS

B. Service Provider or Tenant/Consumer

C. Physical, Network, Compute, Storage, Application or Data

D. Mappings to well-known standards and frameworks

A. Full control over underlying server environments

B. Large initial configuration is not required

C. Requires short-term commitments and defers upfront costs

D. Automatic scaling and reduced operational overhead

A. Isolating network traffic and analyzing network packets frequently

B. Implementing endpoint detection and response (EDR) solutions

C. Capturing container logs and snapshots, and leveraging serverless execution logs

D. Regularly updating antivirus and anti-malware software

A. random placement

B. data dispersion

C. hypervisor agents

D. proxy encryption

E. data rights management

A. Data Security and Encryption

B. Incident Response, Notification and Remediation

C. Compliance and Audit Management

D. Information Governance

E. Infrastructure Security

A. Relies only on automated security testing tools

B. Integrates security early in the development process

C. Emphasizes post-deployment security audits

D. Focuses on security only during the testing phase

A. Encrypt data transmitted over the network

B. Ensure system uptime and reliability

C. Monitor network traffic and detect intrusions

D. Manage the risk of elevated permissions

A. Resource isolation may fail

B. Non-binding agreements put at risk

C. Arbitrary contract termination by acquiring company

D. Mass layoffs may occur

E. Provider may change physical location

A. Developing incident response plans

B. Integrating identity management and securing devices

C. Deploying network segmentation

D. Implementing advanced threat detection systems

A. These are required for proper implementation of RBAC

B. Simplifies regulatory compliance by using a single sign-on mechanism

C. Reduces log analysis requirements

D. Enhances security by supporting authorizations based on the current context and status

A. It would require a previous contractual agreement to obtain the application or access to the environment

B. It may require a subpoena of the provider directly

C. It would require an act of war

D. It would require a previous access agreement

E. It would never be obtained in this situation

A. Using VPN or dedicated links

B. Using satellite connections

C. Using local area network (LAN)

D. Using peer-to-peer networks

A. Independent auditors

B. Certified by CSA

C. Auditors working in the interest of the cloud customer

D. None of the above

E. Auditors working in the interest of the cloud provider

A. Optimization for cost reduction

B. Integration with network infrastructure

C. Alignment with security objectives and regulatory requirements

D. Adherence to software development practices