CCSK practice questions 171–180

1. Question 171 · 207 in bank

   Installing security software designed for physical servers onto a virtualized server can result in severe degradation in performance.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

2. Question 172 · 207 in bank

   CCM: A hypothetical company called "lnfrastructure4Sure" provides Infrastructure as a Service (IaaS) to its clients. A customer wants to review Infrastructure4Sure's hypervisor security implementation measures. Which of the following measures should Infrastructure4Sure implement?

   • AChoose a hypervisor with a smaller footprint for a reduced attack surface.
   • BHarden the hypervisor's configuration to increase areas of vulnerability (e.g., disabling memory sharing between VMs running within the same hypervisor hosts).
   • CConnect unused physical hardware devices and enable clipboard or file-sharing services.
   • DMonitor for signs of compromise by analyzing hypervisor logs on an ongoing basis.
   • EA and D

   Show answer

   Answer: A

   Next question

3. Question 173 · 207 in bank

   Which of the following cloud deployment models represents a composition of two or more clouds that remain unique identities but are bound together by standardized or proprietary technology that enables data and application portability?

   • APublic cloud
   • BHybrid cloud
   • CCommunity cloud
   • DSegregated cloud
   • ENone of the above

   Show answer

   Answer: B

   Next question

4. Question 174 · 207 in bank

   What are six phases of the Data Security Lifecycle?

   • ACreate, Store, Use, Share, Archive, Destroy
   • BCreate, Classify, Use, Store, Archive, Destroy
   • CAssign, Define, Create, Process, Store, Destroy
   • DCreate, Classify, Use, Store, Retain, Destroy
   • EAssign, Define, Store, Process, Transmit, Destroy

   Show answer

   Answer: A

   Next question

5. Question 175 · 207 in bank

   Which tool is the primary tool between the cloud provider and consumer that extends governance into business partners and providers?

   • ACompliance Reporting
   • BSupplier Assessments
   • CConsumer Assessments
   • DContracts
   • EService-level Agreements (SLAs)

   Show answer

   Answer: D

   Next question

6. Question 176 · 207 in bank

   ENISA: Because it is practically impossible to process data in encrypted form, customers should have the following expectation of cloud providers:

   • AProvider should be PCI compliant
   • BProvider should immediately notify customer whenever data is in plaintext form
   • CProvider must be highly trustworthy and have compensating controls to protect customer data when it is in plaintext form
   • DProvider should always manage customer encryption keys with hardware security module (HSM) storage
   • EHomomorphic encryption should be implemented where necessary

   Show answer

   Answer: C

   Next question

7. Question 177 · 207 in bank

   Which statement best describes the options for PaaS encryption?

   • APaaS is very diverse and may include client/application, database, and proxy encryption as well as other options.
   • BPaaS is strictly limited to client/application, database and proxy encryption.
   • CPaaS is sensitive to application updates and therefore must be constantly refreshed with relevant keys.
   • DPaaS is very diverse and would most likely include file/folder and instance-managed encryption.
   • EPaaS is limited to public networks.

   Show answer

   Answer: A

   Next question

8. Question 178 · 207 in bank

   What can be implemented to help with account granularity and limit blast radius with IaaS an PaaS?

   • AMaintaining tight control of the primary account holder credentials
   • BConfiguring secondary authentication
   • CImplementing least privilege accounts
   • DEstablishing multiple accounts
   • EConfiguring role-based authentication

   Show answer

   Answer: D

   Next question

9. Question 179 · 207 in bank

   Which of the following statements best defines the "authentication" component of identity, entitlement, and access management (IdEA).

   • AA guarantee that data in a repository is 100% unregulated
   • BUpdating security protocols to the latest version
   • CEstablishing/asserting the identity to the application
   • DThe process of specifying and maintaining access policies
   • ENone of the above

   Show answer

   Answer: C

   Next question

10. Question 180 · 207 in bank

    What is true of how the management plane is to be secured in the cloud?

    • AThe cloud provider is responsible for securing the management plane and exposing the required security features, while the cloud consumer is responsible for configuring access to the management plane.
    • BThe cloud consumer is responsible for securing the management plane, exposing the required security features, and configuring access to the management plane.
    • CThe cloud consumer is responsible for securing the management plane and exposing the required security features, while the cloud provider is responsible for configuring access to the management plane.
    • DThe cloud provider is responsible for securing the management plane, exposing the required security features, and configuring access to the management plane.
    • EThe cloud provider is responsible exposing the required security features, while the cloud consumer is responsible for securing the management plane and configuring access to the management plane.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSK practice, question 171. 207 questions available.