The Secret Of CSA CCSK Simulations

NEW QUESTION 1
Which of the following statements best defines the "authorization" as a component of identity, entitlement, and access management?

• A. The process of specifying and maintaining access policies
• B. Checking data storage to make sure it meets compliance requirements
• C. Giving a third party vendor permission to work on your cloud solution
• D. Establishing/asserting the identity to the application
• E. Enforcing the rules by which access is granted to the resources

Answer: D

NEW QUESTION 2
Any given processor and memory will nearly always be running multiple workloads, often from different tenants.

• A. False
• B. True

Answer: B

NEW QUESTION 3
CCM: The following list of controls belong to which domain of the CCM?
GRM 06 – Policy GRM 07 – Policy Enforcement GRM 08 – Policy Impact on Risk Assessments GRM 09 – Policy Reviews GRM 10 – Risk Assessments GRM 11 – Risk Management Framework

• A. Governance and Retention Management
• B. Governance and Risk Management
• C. Governing and Risk Metrics

Answer: B

NEW QUESTION 4
The containment phase of the incident response lifecycle requires taking systems offline.

• A. False
• B. True

Answer: B

NEW QUESTION 5
Which of the following statements best describes an identity federation?

• A. A library of data definitions
• B. A group of entities which have decided to exist together in a single cloud
• C. Identities which share similar attributes
• D. Several countries which have agreed to define their identities with similar attributes
• E. The connection of one identity repository to another

Answer: E

NEW QUESTION 6
CCM: The Cloud Service Delivery Model Applicability column in the CCM indicates the applicability of the cloud security control to which of the following elements?

• A. Mappings to well-known standards and frameworks
• B. Service Provider or Tenant/Consumer
• C. Physical, Network, Compute, Storage, Application or Data
• D. SaaS, PaaS or IaaS

Answer: D

NEW QUESTION 7
Which type of application security testing tests running applications and includes tests such as web vulnerability testing and fuzzing?

• A. Code Review
• B. Static Application Security Testing (SAST)
• C. Unit Testing
• D. Functional Testing
• E. Dynamic Application Security Testing (DAST)

Answer: E

NEW QUESTION 8
How does virtualized storage help avoid data loss if a drive fails?

• A. Multiple copies in different locations
• B. Drives are backed up, swapped, and archived constantly
• C. Full back ups weekly
• D. Data loss is unavoidable with drive failures
• E. Incremental backups daily

Answer: A

NEW QUESTION 9
All assets require the same continuity in the cloud.

• A. False
• B. True

Answer: A

NEW QUESTION 10
ENISA: Which is not one of the five key legal issues common across all scenarios:

• A. Data protection
• B. Professional negligence
• C. Globalization
• D. Intellectual property
• E. Outsourcing services and changes in control

Answer: C

NEW QUESTION 11
CCM: The Architectural Relevance column in the CCM indicates the applicability of the cloud security control to which of the following elements?

• A. Service Provider or Tenant/Consumer
• B. Physical, Network, Compute, Storage, Application or Data
• C. SaaS, PaaS or IaaS

Answer: C

NEW QUESTION 12
What does it mean if the system or environment is built automatically from a template?

• A. Nothing.
• B. It depends on how the automation is configured.
• C. Changes made in production are overwritten by the next code or template change.
• D. Changes made in test are overwritten by the next code or template change.
• E. Changes made in production are untouched by the next code or template change.

Answer: D

NEW QUESTION 13
ENISA: “VM hopping” is:

• A. Improper management of VM instances, causing customer VMs to be commingled with other customer systems.
• B. Looping within virtualized routing systems.
• C. Lack of vulnerability management standards.
• D. Using a compromised VM to exploit a hypervisor, used to take control of other VMs.
• E. Instability in VM patch management causing VM routing errors.

Answer: D

NEW QUESTION 14
ENISA: A reason for risk concerns of a cloud provider being acquired is:

• A. Arbitrary contract termination by acquiring company
• B. Resource isolation may fail
• C. Provider may change physical location
• D. Mass layoffs may occur
• E. Non-binding agreements put at risk

Answer: E

NEW QUESTION 15
Which cloud security model type provides generalized templates for helping implement cloud security?

• A. Conceptual models or frameworks
• B. Design patterns
• C. Controls models or frameworks
• D. Reference architectures
• E. Cloud Controls Matrix (CCM)

Answer: D

NEW QUESTION 16
What type of information is contained in the Cloud Security Alliance's Cloud Control Matrix?

• A. Network traffic rules for cloud environments
• B. A number of requirements to be implemented, based upon numerous standards and regulatory requirements
• C. Federal legal business requirements for all cloud operators
• D. A list of cloud configurations including traffic logic and efficient routes
• E. The command and control management hierarchy of typical cloud company

Answer: B

NEW QUESTION 17
......