CCSK practice questions 31–40

1. Question 31 · 207 in bank

   Sending data to a provider's storage over an API is likely as much more reliable and secure than setting up your own SFTP server on a VM in the same provider

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

2. Question 32 · 207 in bank

   What is true of searching data across cloud environments?

   • AYou might not have the ability or administrative rights to search or access all hosted data.
   • BThe cloud provider must conduct the search with the full administrative controls.
   • CAll cloud-hosted email accounts are easily searchable.
   • DSearch and discovery time is always factored into a contract between the consumer and provider.
   • EYou can easily search across your environment using any E-Discovery tool.

   Show answer

   Answer: A

   Next question

3. Question 33 · 207 in bank

   How does running applications on distinct virtual networks and only connecting networks as needed help?

   • AIt reduces hardware costs
   • BIt provides dynamic and granular policies with less management overhead
   • CIt locks down access and provides stronger data security
   • DIt reduces the blast radius of a compromised system
   • EIt enables you to configure applications around business groups

   Show answer

   Answer: D

   Next question

4. Question 34 · 207 in bank

   How can virtual machine communications bypass network security controls?

   • AVM communications may use a virtual network on the same hardware host
   • BThe guest OS can invoke stealth mode
   • CHypervisors depend upon multiple network interfaces
   • DVM images can contain rootkits programmed to bypass firewalls
   • EMost network security systems do not recognize encrypted VM traffic

   Show answer

   Answer: A

   Next question

5. Question 35 · 207 in bank

   ENISA: `VM hopping` is:

   • AImproper management of VM instances, causing customer VMs to be commingled with other customer systems.
   • BLooping within virtualized routing systems.
   • CLack of vulnerability management standards.
   • DUsing a compromised VM to exploit a hypervisor, used to take control of other VMs.
   • EInstability in VM patch management causing VM routing errors.

   Show answer

   Answer: D

   Next question

6. Question 36 · 207 in bank

   Which concept is a mapping of an identity, including roles, personas, and attributes, to an authorization?

   • AAccess control
   • BFederated Identity Management
   • CAuthoritative source
   • DEntitlement
   • EAuthentication

   Show answer

   Answer: D

   Next question

7. Question 37 · 207 in bank

   Which concept provides the abstraction needed for resource pools?

   • AVirtualization
   • BApplistructure
   • CHypervisor
   • DMetastructure
   • EOrchestration

   Show answer

   Answer: A

   Next question

8. Question 38 · 207 in bank

   Network logs from cloud providers are typically flow records, not full packet captures.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

9. Question 39 · 207 in bank

   Select the best definition of `compliance` from the options below.

   • AThe development of a routine that covers all necessary security measures.
   • BThe diligent habits of good security practices and recording of the same.
   • CThe timely and efficient filing of security reports.
   • DThe awareness and adherence to obligations, including the assessment and prioritization of corrective actions deemed necessary and appropriate.
   • EThe process of completing all forms and paperwork necessary to develop a defensible paper trail.

   Show answer

   Answer: D

   Next question

10. Question 40 · 207 in bank

    CCM: In the CCM tool, `Encryption and Key Management` is an example of which of the following?

    • ARisk Impact
    • BDomain
    • CControl Specification

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSK practice, question 31. 207 questions available.