CCSK practice questions 21–30

1. Question 21 · 207 in bank

   REST APIs are the standard for web-based services because they run over HTTPS and work well across diverse environments.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

2. Question 22 · 207 in bank

   Which of the following statements are NOT requirements of governance and enterprise risk management in a cloud environment?

   • AInspect and account for risks inherited from other members of the cloud supply chain and take active measures to mitigate and contain risks through operational resiliency.
   • BRespect the interdependency of the risks inherent in the cloud supply chain and communicate the corporate risk posture and readiness to consumers and dependent parties.
   • CNegotiate long-term contracts with companies who use well-vetted software application to avoid the transient nature of the cloud environment.
   • DProvide transparency to stakeholders and shareholders demonstrating fiscal solvency and organizational transparency.
   • EBoth B and C.

   Show answer

   Answer: C

   Next question

3. Question 23 · 207 in bank

   What is defined as the process by which an opposing party may obtain private documents for use in litigation?

   • ADiscovery
   • BCustody
   • CSubpoena
   • DRisk Assessment
   • EScope

   Show answer

   Answer: A

   Next question

4. Question 24 · 207 in bank

   What item below allows disparate directory services and independent security domains to be interconnected?

   • ACoalition
   • BCloud
   • CIntersection
   • DUnion
   • EFederation

   Show answer

   Answer: E

   Next question

5. Question 25 · 207 in bank

   Use elastic servers when possible and move workloads to new instances.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

6. Question 26 · 207 in bank

   To understand their compliance alignments and gaps with a cloud provider, what must cloud customers rely on?

   • AProvider documentation
   • BProvider run audits and reports
   • CThird-party attestations
   • DProvider and consumer contracts
   • EEDiscovery tools

   Show answer

   Answer: C

   Next question

7. Question 27 · 207 in bank

   Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

   • AMore physical control over assets and processes.
   • BGreater reliance on contracts, audits, and assessments due to lack of visibility or management.
   • CDecreased requirement for proactive management of relationship and adherence to contracts.
   • DIncreased need, but reduction in costs, for managing risks accepted by the cloud provider.
   • ENone of the above.

   Show answer

   Answer: B

   Next question

8. Question 28 · 207 in bank

   Which data security control is the LEAST likely to be assigned to an IaaS provider?

   • AApplication logic
   • BAccess controls
   • CEncryption solutions
   • DPhysical destruction
   • EAsset management and tracking

   Show answer

   Answer: A

   Next question

9. Question 29 · 207 in bank

   How does virtualized storage help avoid data loss if a drive fails?

   • AMultiple copies in different locations
   • BDrives are backed up, swapped, and archived constantly
   • CFull back ups weekly
   • DData loss is unavoidable with drive failures
   • EIncremental backups daily

   Show answer

   Answer: A

   Next question

10. Question 30 · 207 in bank

    What is the newer application development methodology and philosophy focused on automation of application development and deployment?

    • AAgile
    • BBusOps
    • CDevOps
    • DSecDevOps
    • EScrum

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSK practice, question 21. 207 questions available.