Cloud Security Alliance Cloud Security Alliance Certifications CCSK Questions & Answers

• Question 81:

  What is defined as the process by which an opposing party may obtain private documents for use in litigation?

  A. Discovery

  B. Custody

  C. Subpoena

  D. Risk Assessment

  E. Scope

  Correct Answer: A

• Question 82:

  REST APIs are the standard for web-based services because they run over HTTPS and work well across diverse environments.

  A. False

  B. True

  Correct Answer: B

• Question 83:

  Which of the following statements are NOT requirements of governance and enterprise risk management in a cloud environment?

  A. Inspect and account for risks inherited from other members of the cloud supply chain and take active measures to mitigate and contain risks through operational resiliency.

  B. Respect the interdependency of the risks inherent in the cloud supply chain and communicate the corporate risk posture and readiness to consumers and dependent parties.

  C. Negotiate long-term contracts with companies who use well-vetted software application to avoid the transient nature of the cloud environment.

  D. Provide transparency to stakeholders and shareholders demonstrating fiscal solvency and organizational transparency.

  E. Both B and C.

  Correct Answer: C

• Question 84:

  Which governance domain deals with evaluating how cloud computing affects compliance with internal security policies and various legal requirements, such as regulatory and legislative?

  A. Legal Issues: Contracts and Electronic Discovery

  B. Infrastructure Security

  C. Compliance and Audit Management

  D. Information Governance

  E. Governance and Enterprise Risk Management

  Correct Answer: C

• Question 85:

  An important consideration when performing a remote vulnerability test of a cloud-based application is to

  A. Obtain provider permission for test

  B. Use techniques to evade cloud provider's detection systems

  C. Use application layer testing tools exclusively

  D. Use network layer testing tools exclusively

  E. Schedule vulnerability test at night

  Correct Answer: A

• Question 86:

  Cloud services exhibit five essential characteristics that demonstrate their relation to, and differences from, traditional computing approaches. Which one of the five characteristics is described as: a consumer can unilaterally provision computing capabilities such as server time and network storage as needed?

  A. Rapid elasticity

  B. Resource pooling

  C. Broad network access

  D. Measured service

  E. On-demand self-service

  Correct Answer: E

• Question 87:

  Why is a service type of network typically isolated on different hardware?

  A. It requires distinct access controls

  B. It manages resource pools for cloud consumers

  C. It has distinct functions from other networks

  D. It manages the traffic between other networks

  E. It requires unique security

  Correct Answer: C

• Question 88:

  Cloud applications can use virtual networks and other structures, for hyper-segregated environments.

  A. False

  B. True

  Correct Answer: B

• Question 89:

  Your cloud and on-premises infrastructures should always use the same network address ranges.

  A. False

  B. True

  Correct Answer: A

• Question 90:

  Which layer is the most important for securing because it is considered to be the foundation for secure cloud operations?

  A. Infrastructure

  B. Datastructure

  C. Infostructure

  D. Applistructure

  E. Metastructure

  Correct Answer: A