CCSK practice questions 11–20

1. Question 11 · 207 in bank

   Big data includes high volume, high variety, and high velocity.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

2. Question 12 · 207 in bank

   CCM: A hypothetical company called: `Health4Sure` is located in the United States and provides cloud based services for tracking patient health. The company is compliant with HIPAA/HITECH Act among other industry standards. Health4Sure decides to assess the overall security of their cloud service against the CCM toolkit so that they will be able to present this document to potential clients. Which of the following approach would be most suitable to assess the overall security posture of Health4Sure's cloud service?

   • AThe CCM columns are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered ad a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls. This approach will save time.
   • BThe CCM domain controls are mapped to HIPAA/HITECH Act and therefore Health4Sure could verify the CCM controls already covered as a result of their compliance with HIPPA/HITECH Act. They could then assess the remaining controls thoroughly. This approach saves time while being able to assess the company's overall security posture in an efficient manner.
   • CThe CCM domains are not mapped to HIPAA/HITECH Act. Therefore Health4Sure should assess the security posture of their cloud service against each and every control in the CCM. This approach will allow a thorough assessment of the security posture.

   Show answer

   Answer: B

   Next question

3. Question 13 · 207 in bank

   A defining set of rules composed of claims and attributes of the entities in a transaction, which is used to determine their level of access to cloud-based resources is called what?

   • AAn entitlement matrix
   • BA support table
   • CAn entry log
   • DA validation process
   • EAn access log

   Show answer

   Answer: A

   Next question

4. Question 14 · 207 in bank

   Cloud applications can use virtual networks and other structures, for hyper-segregated environments.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

5. Question 15 · 207 in bank

   Your cloud and on-premises infrastructures should always use the same network address ranges.

   • AFalse
   • BTrue

   Show answer

   Answer: A

   Next question

6. Question 16 · 207 in bank

   Which layer is the most important for securing because it is considered to be the foundation for secure cloud operations?

   • AInfrastructure
   • BDatastructure
   • CInfostructure
   • DApplistructure
   • EMetastructure

   Show answer

   Answer: A

   Next question

7. Question 17 · 207 in bank

   Why is a service type of network typically isolated on different hardware?

   • AIt requires distinct access controls
   • BIt manages resource pools for cloud consumers
   • CIt has distinct functions from other networks
   • DIt manages the traffic between other networks
   • EIt requires unique security

   Show answer

   Answer: C

   Next question

8. Question 18 · 207 in bank

   Which governance domain deals with evaluating how cloud computing affects compliance with internal security policies and various legal requirements, such as regulatory and legislative?

   • ALegal Issues: Contracts and Electronic Discovery
   • BInfrastructure Security
   • CCompliance and Audit Management
   • DInformation Governance
   • EGovernance and Enterprise Risk Management

   Show answer

   Answer: C

   Next question

9. Question 19 · 207 in bank

   An important consideration when performing a remote vulnerability test of a cloud-based application is to

   • AObtain provider permission for test
   • BUse techniques to evade cloud provider's detection systems
   • CUse application layer testing tools exclusively
   • DUse network layer testing tools exclusively
   • ESchedule vulnerability test at night

   Show answer

   Answer: A

   Next question

10. Question 20 · 207 in bank

    Cloud services exhibit five essential characteristics that demonstrate their relation to, and differences from, traditional computing approaches. Which one of the five characteristics is described as: a consumer can unilaterally provision computing capabilities such as server time and network storage as needed?

    • ARapid elasticity
    • BResource pooling
    • CBroad network access
    • DMeasured service
    • EOn-demand self-service

    Show answer

    Answer: E

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSK practice, question 11. 207 questions available.