[Jun-2024] CCSK Exam Dumps, CCSK Practice Test Questions [Q69-Q86]

admin CCSK Cloud Security Alliance June 22, 2024

Rate this post

[Jun-2024] CCSK Exam Dumps, CCSK Practice Test Questions

Attested CCSK Dumps PDF Resource [2024]

The CCSK certification is vendor-neutral, meaning it is not tied to any specific cloud provider, technology, or platform. This makes it an ideal certification for professionals who work with multiple cloud platforms and need to have a comprehensive understanding of cloud security principles. The CCSK exam is also offered online, allowing professionals to take the exam from any location and at any time that is convenient for them.

QUESTION 69
Which of the following help to intermediate IAM between an organization’s existing identity providers and many different cloud services used by the organization?

Federated Identity Provider

Relying Party

Cloud Access Security Broker

Active Director

One of the better-known categories heavily used in cloud security is Federated Identity Brokers. These services help intermediate IAM between an organization’s existing identity providers(internal Security Guidance v4.0 Copyright2017. Cloud Security Alliance. All rights reserved or cloud-hosted directories) and the many different cloud services used by the organization. They can provide web-based Single Sign
0n(SS0). helping ease some of the complexity of connecting to a wide range of external services that use different federation configurations.
Reference: CSA Security Guidelines V.4(reproduced here for the educational purpose)

QUESTION 70
Which is the leading industry leading standard you will recommend to a web developer when designing web application or an API for a cloud solution?

ISO 27001

SOC2

FIPS 140

OWASP

OWASP is an open project and is leading industry standard for designing web applications and its security.

QUESTION 71
APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

False

True

QUESTION 72
Which of the following is not one of the essential characteristics as defined by NIST 800-145?

Broad Network Access

On-demand Shelf service

Rapid Elasticity

Resource Pooling

The key characteristic is on-demand self-service and not shelf” service.

QUESTION 73
Which of the following functions maps to all the phases of Data security life cycle?

Read/Access

Process

Store

Destroy

Functions: There are three things we can do with a given datum:
. Read, View/read the data, including creating, copying, file transfers, dissemination, and other exchanges of information.
* Process. Perform a transaction on the data; update it; use it in a business processing transaction, etc.
. Store, Hold the data (in a file, database, etc.).

QUESTION 74
Which of the following adds abstraction layer on top of networking hardware and decouples network control plane from the data plane?

VLANs

Software Defined Networks

Virtual Private Networks

Converged Networks

Software Defined Networking(SDN):A more complete abstraction layer on top of networking hardware, SDNs decouple the network control plane from the data. This allows us to abstract networking from the traditional limitations of a LAN.
Reference: CSA Security GuidelinesV.4(reproduced here for the educational purpose)

QUESTION 75
Which of the following decouples the network control plane from the data plane and allows to abstract networking from the tradition a limitations of a LAN?

VLANS

Traditional Networking

Software defined networking

Converged Networking

Software Defined Networking(SDN):A more complete abstraction layer on top of networking hardware, SDNs decouple the network control plane from the data plane(you can read more on SDN principles at this Wikipedia entry).This allows us to abstract networking from the traditional limitations of a LAN.
Reference: CSA Security Guidelines V4.0

QUESTION 76
Which of the following is the correct pair of risk management standards?

ISO27002 & ISO27005

ISO27001 & ISO27018

ISO31000 & ISO27017

ISO27005 & ISO31000

IS027005 refers to processes for IT Risk Management whereas ISO31000 refers to Enterprise Risk Management

QUESTION 77
Stopping a function to control further risk to business is called:

Mitigation

Avoidance

Acceptance

Transference

Risk avoidance is the practice of coming up with alternatives so that the risk in question is not realised.

QUESTION 78
The containment phase of the incident response lifecycle requires taking systems offline.

False

True

QUESTION 79
Which of the following very important consideration when securing access to the Management Plane?

Remote Access VPN

Least Privilege

Super Administrator

Service Administrator

Both providers and consumers should consistently only allow the least privilege required for users.
applications. and other management plane usage.
Reference: CSA Security Guidelines V.4(reproduced here for the educational purpose)

QUESTION 80
When your bank or credit card company sends you a notification of changes in how it collects or shares data, it is sending that notification in compliance with:

HIPAA

GDPR

FERPA

ISO 27001

Under GDPR. it is mandatory to notify consumers how their data will be used

QUESTION 81
What is the most significant security difference between traditional infrastructure and cloud computing?

Management plane

Intrusion detection options

Secondary authentication factors

Network access points

Mobile security configuration options

QUESTION 82
Which of the following can result in vendor lock-in?

Favourable contract in favour of customer

Proprietary data formats

Large datasets

technology

Proprietary data formats should be avoided. This can result in vendor lock-in.

QUESTION 83
Which of the following is not one of the essential characteristics of Cloud Computing?

On-demand self service

Broad network access

Resource Sharing

Rapid elasticit

Resource sharing is not one of the key characteristics of Cloud Computing

QUESTION 84
Which form of storage has features are typically minimal. allowing you to only store, retrieve, copy and delete files as well as the ability to control which users can undertake these actions?

Object Storage

Volume Storage

Ephemeral Storage

Block Storage

Object Storage has features are typically minimal, allowing you to only store, retrieve, copy, and delete files as well as the ability to control which users can undertake these actions.

QUESTION 85
What is true of a workload?

It is a unit of processing that consumes memory

It does not require a hardware stack

It is always a virtual machine

It is configured for specific, established tasks

It must be containerized

QUESTION 86
If in certain litigations and investigations, the actual cloud application or environment itself is relevant to resolving the dispute in the litigation or investigation, how is the information likely to be obtained?

It may require a subpoena of the provider directly

It would require a previous access agreement

It would require an act of war

It would require a previous contractual agreement to obtain the application or access to the environment

It would never be obtained in this situation

Loading …