Cloud Security Alliance Cloud Security Alliance Certifications CCSK Questions & Answers

• Question 211:

  Which security concept includes the policy, process, and internal controls comprising how an organization is run ?including the structures and policies of the leadership and other mechanisms for management?

  A. Governance

  B. Information security

  C. Enterprise risk management

  D. Information risk management

  E. Compliance

  Correct Answer: A

• Question 212:

  Cloud provider contract enforceability should be carefully considered in light of

  A. Costs

  B. Provider key management systems

  C. Provider controls proving inadequate for customer risks

  D. Foreign and out of state jurisdictions

  E. Pre-production cloud deployments

  Correct Answer: D

• Question 213:

  The hub and spoke architecture uses internal identity providers or sources connected directly to cloud providers.

  A. False

  B. True

  Correct Answer: A

  A is the correct answer.

  Free-form: internal identity providers/sources (often directory servers) connect directly to cloud providers.

  Hub and spoke: internal identity providers/sources communicate with a central broker or repository that then serves as the identity provider for federation to cloud providers.

• Question 214:

  Who is responsible for the proper rights management and configuration of exposed controls in the management plane?

  A. The cloud provider

  B. The responsibility is split equally

  C. The cloud consumer

  D. It depends on the agreement

  E. The majority is covered by the provider

  Correct Answer: C

• Question 215:

  CCM: Cloud Controls Matrix (CCM) is a completely independent cloud assessment toolkit that does not map any existing standards.

  A. True

  B. False

  Correct Answer: B

• Question 216:

  Which of the following statements best describes an identity federation?

  A. A library of data definitions

  B. A group of entities which have decided to exist together in a single cloud

  C. Identities which share similar attributes

  D. Several countries which have agreed to define their identities with similar attributes

  E. The connection of one identity repository to another

  Correct Answer: E

• Question 217:

  Which term describes any situation where the cloud consumer does not manage any of the underlying hardware or virtual machines?

  A. Serverless computing

  B. Virtual machineless

  C. Abstraction

  D. Container

  E. Provider managed

  Correct Answer: A

• Question 218:

  How can cloud providers support a secure use of virtualization for cloud consumers?

  A. By creating a secure chain of processes from the image used to run the VM through to a boot process with security and integrity

  B. By locking, denying, or preventing access and then gradually enabling items as needed

  C. By providing professional services to assist the consumer with configurations

  D. Unfortunately, this is not a possible option for cloud consumers

  E. By enabling full access to the consumer

  Correct Answer: A

• Question 219:

  Which SDP component terminates network traffic and enforces communication policies?

  A. Client

  B. Access Manager

  C. Gateway

  D. Firewall

  E. Controller

  Correct Answer: C

• Question 220:

  Database Activity Monitoring and File Activity Monitoring are specifically recommended for what type of data migrations into the cloud?

  A. Simple, homogenous migrations

  B. Large, internal data migrations

  C. Small, stealthy data migrations

  D. Small, external data migrations

  E. Complex, long-term migrations

  Correct Answer: B