CCSK practice questions 91–100

1. Question 91 · 207 in bank

   CCM: A company wants to use the IaaS offering of some CSP. Which of the following options for using CCM is NOT suitable for the company as a cloud customer?

   • ASubmit the CCM on behalf of the CSP to CSA Security, Trust & Assurance Registry (STAR), a free, publicly accessible registry that documents the security controls provided by CSPs
   • BUse CCM to build a detailed list of requirements and controls that they want their CSP to implement
   • CUse CCM to help assess the risk associated with the CSP
   • DNone of the above

   Show answer

   Answer: A

   Next question

2. Question 92 · 207 in bank

   If the management plane has been breached, you should confirm the templates/configurations for your infrastructure or applications have not also been compromised.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

3. Question 93 · 207 in bank

   CCM: A hypothetical start-up company called "ABC" provides a cloud based IT management solution. They are growing rapidly and therefore need to put controls in place in order to manage any changes in their production environment. Which of the following Change Control & Configuration Management production environment specific control should they implement in this scenario?

   • APolicies and procedures shall be established for managing the risks associated with applying changes to business-critical or customer (tenant)-impacting (physical and virtual) applications and system-system interface (API) designs and configurations, infrastructure network and systems components.
   • BPolicies and procedures shall be established, and supporting business processes and technical measures implemented, to restrict the installation of unauthorized software on organizationally-owned or managed user end-point devices (e.g. issued workstations, laptops, and mobile devices) and IT infrastructure network and systems components.
   • CAll cloud-based services used by the company's mobile devices or BYOD shall be pre-approved for usage and the storage of company business data.
   • DNone of the above

   Show answer

   Answer: A

   Next question

4. Question 94 · 207 in bank

   Containers are highly portable code execution environments.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

5. Question 95 · 207 in bank

   Which statement best describes the Data Security Lifecycle?

   • AThe Data Security Lifecycle has six stages, is strictly linear, and never varies.
   • BThe Data Security Lifecycle has six stages, can be non-linear, and varies in that some data may never pass through all stages.
   • CThe Data Security Lifecycle has five stages, is circular, and varies in that some data may never pass through all stages.
   • DThe Data Security Lifecycle has six stages, can be non-linear, and is distinct in that data must always pass through all phases.
   • EThe Data Security Lifecycle has five stages, can be non-linear, and is distinct in that data must always pass through all phases.

   Show answer

   Answer: B

   Next question

6. Question 96 · 207 in bank

   Which of the following encryption methods would be utilized when object storage is used as the back-end for an application?

   • ADatabase encryption
   • BMedia encryption
   • CAsymmetric encryption
   • DObject encryption
   • EClient/application encryption

   Show answer

   Answer: E

   Next question

7. Question 97 · 207 in bank

   In the Software-as-a-service relationship, who is responsible for the majority of the security?

   • AApplication Consumer
   • BDatabase Manager
   • CApplication Developer
   • DCloud Provider
   • EWeb Application CISO

   Show answer

   Answer: D

   Next question

8. Question 98 · 207 in bank

   What method can be utilized along with data fragmentation to enhance security?

   • AEncryption
   • BOrganization
   • CKnowledge management
   • DIDS
   • EInsulation

   Show answer

   Answer: A

   Next question

9. Question 99 · 207 in bank

   Which of the following statements best defines the "authorization" as a component of identity, entitlement, and access management?

   • AThe process of specifying and maintaining access policies
   • BChecking data storage to make sure it meets compliance requirements
   • CGiving a third party vendor permission to work on your cloud solution
   • DEstablishing/asserting the identity to the application
   • EEnforcing the rules by which access is granted to the resources

   Show answer

   Answer: E

   Next question

10. Question 100 · 207 in bank

    How can web security as a service be deployed for a cloud consumer?

    • ABy proxying or redirecting web traffic to the cloud provider
    • BBy utilizing a partitioned network drive
    • COn the premise through a software or appliance installation
    • DBoth A and C
    • ENone of the above

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSK practice, question 91. 207 questions available.