Cloud Security Alliance Cloud Security Alliance Certifications CCSK Questions & Answers

• Question 191:

  Which components typically comprise Infrastructure-as-a-Service (IaaS) providers?

  A. Hardware, APIs, and Core Connectivity and Delivery

  B. Integration and Middleware, APIS, and Data

  C. Hardware, APIs, and Data

  D. Presentation modality, APIs, Applications, and Data

  E. Presentation modality, APIs, Applications, and Hardware

  Correct Answer: A

  Thus IaaS consists of a facility, hardware, an abstraction layer, an orchestration (core connectivity and delivery) layer to tie together the abstracted resources, and APIs to remotely manage the resources and deliver them to consumers.

• Question 192:

  What makes single cloud assets less resilient compared with a traditional infrastructure?

  A. Greater fragility of virtualized resources

  B. Less management oversight

  C. Less cost effective

  D. API access

  E. Not scalable

  Correct Answer: A

• Question 193:

  ENISA: In Infrastructure as a Service (IaaS), who is responsible for guest systems monitoring?

  A. Customer

  B. Cloud Provider

  C. Shared responsibility

  D. Internet Service Provider (ISP)

  E. Data Commissioner

  Correct Answer: A

• Question 194:

  What are the components of an encryption system?

  A. User, data, and encryption engine

  B. Data, encryption engine, and decryption tool

  C. User, encryption engine, and key management

  D. Data, encryption engine, and key management

  E. User, data, and key management

  Correct Answer: D

  11.1.4.2 -There are three components of an encryption system: data, the encryption engine, and key management.

• Question 195:

  What is the main data source for detection and analysis of an incident?

  A. Logs

  B. Data repositories

  C. The Pew Research Center

  D. Blogs

  E. Database

  Correct Answer: A

• Question 196:

  Which cloud storage technology would include a content delivery network (CON), files stored in SaaS, and caching?

  A. Database

  B. Volume storage

  C. Application

  D. Object storage

  E. Service

  Correct Answer: C

  Application/platform: Examples of these would be a content delivery network (CDN), files stored in SaaS, caching, and other novel options.

• Question 197:

  What is a challenge of application security in a cloud environment?

  A. Non-uni ed interface

  B. Limited detailed visibility

  C. Isolated environments

  D. Decreased application scope

  E. Responsiveness

  Correct Answer: B

  Limited detailed visibility. Visibility and the availability of monitoring and logging are impacted, requiring new approaches to gathering security-related data. This is especially true when using PaaS, where commonly available logs, such as system or network logs, are often no longer accessible to the cloud user.

• Question 198:

  In which deployment model do cloud customers have a reduced ability to govern operations because the cloud provider is responsible for the management and governance of the infrastructure?

  A. Community Cloud

  B. Private Cloud

  C. Hosted Cloud

  D. Public Cloud

  E. Hybrid Cloud

  Correct Answer: D

• Question 199:

  CCM: In the Identity and Access Management (IAM) domain, what does the number `04' in IAM-04 signify?

  A. There are 4 controls in that particular domain

  B. The control ID is a random number assigned to the control

  C. It is the 4th control in the IAM domain

  D. None of the above

  Correct Answer: C

• Question 200:

  Which of the following is NOT a method of object storage encryption?

  A. Externally managed encryption

  B. File/folder encryption

  C. Enterprise digital rights management

  D. Proxy encryption

  E. Client/application encryption

  Correct Answer: C