CCSK practice questions 1–10

1. Question 1 · 207 in bank

   All cloud services utilize virtualization technologies.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

2. Question 2 · 207 in bank

   If there are gaps in network logging data, what can you do?

   • ANothing. There are simply limitations around the data that can be logged in the cloud.
   • BAsk the cloud provider to open more ports.
   • CYou can instrument the technology stack with your own logging.
   • DAsk the cloud provider to close more ports.
   • ENothing. The cloud provider must make the information available.

   Show answer

   Answer: C

   Next question

3. Question 3 · 207 in bank

   CCM: In the CCM tool, a _____________________ is a measure that modifies risk and includes any process, policy, device, practice or any other actions which modify risk.

   • ARisk Impact
   • BDomain
   • CControl Specification

   Show answer

   Answer: C

   Next question

4. Question 4 · 207 in bank

   Who is responsible for the security of the physical infrastructure and virtualization platform?

   • AThe cloud consumer
   • BThe majority is covered by the consumer
   • CIt depends on the agreement
   • DThe responsibility is split equally
   • EThe cloud provider

   Show answer

   Answer: E

   Next question

5. Question 5 · 207 in bank

   What factors should you understand about the data specifically due to legal, regulatory, and jurisdictional factors?

   • AThe physical location of the data and how it is accessed
   • BThe fragmentation and encryption algorithms employed
   • CThe language of the data and how it affects the user
   • DThe implications of storing complex information on simple storage systems
   • EThe actual size of the data and the storage format

   Show answer

   Answer: A

   Next question

6. Question 6 · 207 in bank

   Which cloud-based service model enables companies to provide client-based access for partners to databases or applications?

   • APlatform-as-a-service (PaaS)
   • BDesktop-as-a-service (DaaS)
   • CInfrastructure-as-a-service (IaaS)
   • DIdentity-as-a-service (IDaaS)
   • ESoftware-as-a-service (SaaS)

   Show answer

   Answer: A

   Next question

7. Question 7 · 207 in bank

   CCM: The following list of controls belong to which domain of the CCM? GRM 06 `" Policy GRM 07 `" Policy Enforcement GRM 08 `" Policy Impact on Risk Assessments GRM 09 `" Policy Reviews GRM 10 `" Risk Assessments GRM 11 `" Risk Management Framework

   • AGovernance and Retention Management
   • BGovernance and Risk Management
   • CGoverning and Risk Metrics

   Show answer

   Answer: B

   Next question

8. Question 8 · 207 in bank

   Which attack surfaces, if any, does virtualization technology introduce?

   • AThe hypervisor
   • BVirtualization management components apart from the hypervisor
   • CConfiguration and VM sprawl issues
   • DAll of the above

   Show answer

   Answer: D

   Next question

9. Question 9 · 207 in bank

   APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

10. Question 10 · 207 in bank

    Which of the following is NOT a cloud computing characteristic that impacts incidence response?

    • AThe on demand self-service nature of cloud computing environments.
    • BPrivacy concerns for co-tenants regarding the collection and analysis of telemetry and artifacts associated with an incident.
    • CThe possibility of data crossing geographic or jurisdictional boundaries.
    • DObject-based storage in a private cloud.
    • EThe resource pooling practiced by cloud services, in addition to the rapid elasticity offered by cloud infrastructures.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSK practice, question 1. 207 questions available.