CCSK practice questions 41–50

1. Question 41 · 207 in bank

   In volume storage, what method is often used to support resiliency and security?

   • Aproxy encryption
   • Bdata rights management
   • Chypervisor agents
   • Ddata dispersion
   • Erandom placement

   Show answer

   Answer: D

   Next question

2. Question 42 · 207 in bank

   What is true of security as it relates to cloud network infrastructure?

   • AYou should apply cloud firewalls on a per-network basis.
   • BYou should deploy your cloud firewalls identical to the existing firewalls.
   • CYou should always open traffic between workloads in the same virtual subnet for better visibility.
   • DYou should implement a default allow with cloud firewalls and then restrict as necessary.
   • EYou should implement a default deny with cloud firewalls.

   Show answer

   Answer: E

   Next question

3. Question 43 · 207 in bank

   Which statement best describes the impact of Cloud Computing on business continuity management?

   • AA general lack of interoperability standards means that extra focus must be placed on the security aspects of migration between Cloud providers.
   • BThe size of data sets hosted at a Cloud provider can present challenges if migration to another provider becomes necessary.
   • CCustomers of SaaS providers in particular need to mitigate the risks of application lock-in.
   • DClients need to do business continuity planning due diligence in case they suddenly need to switch providers.
   • EGeographic redundancy ensures that Cloud Providers provide highly available services.

   Show answer

   Answer: D

   Next question

4. Question 44 · 207 in bank

   What is known as a code execution environment running within an operating system that shares and uses the resources of the operating system?

   • APlatform-based Workload
   • BPod
   • CAbstraction
   • DContainer
   • EVirtual machine

   Show answer

   Answer: D

   Next question

5. Question 45 · 207 in bank

   Which term is used to describe the use of tools to selectively degrade portions of the cloud to continuously test business continuity?

   • APlanned Outages
   • BResiliency Planning
   • CExpected Engineering
   • DChaos Engineering
   • EOrganized Downtime

   Show answer

   Answer: D

   Next question

6. Question 46 · 207 in bank

   What is true of companies considering a cloud computing business relationship?

   • AThe laws protecting customer data are based on the cloud provider and customer location only.
   • BThe confidentiality agreements between companies using cloud computing services is limited legally to the company, not the provider.
   • CThe companies using the cloud providers are the custodians of the data entrusted to them.
   • DThe cloud computing companies are absolved of all data security and associated risks through contracts and data laws.
   • EThe cloud computing companies own all customer data.

   Show answer

   Answer: C

   Next question

7. Question 47 · 207 in bank

   Dynamic Application Security Testing (DAST) might be limited or require pre-testing permission from the provider.

   • AFalse
   • BTrue

   Show answer

   Answer: B

   Next question

8. Question 48 · 207 in bank

   When deploying Security as a Service in a highly regulated industry or environment, what should both parties agree on in advance and include in the SLA?

   • AThe metrics defining the service level required to achieve regulatory objectives.
   • BThe duration of time that a security violation can occur before the client begins assessing regulatory fines.
   • CThe cost per incident for security breaches of regulated information.
   • DThe regulations that are pertinent to the contract and how to circumvent them.
   • EThe type of security software which meets regulations and the number of licenses that will be needed.

   Show answer

   Answer: A

   Next question

9. Question 49 · 207 in bank

   Which cloud storage technology is basically a virtual hard drive for instanced or VMs?

   • AVolume storage
   • BPlatform
   • CDatabase
   • DApplication
   • EObject storage

   Show answer

   Answer: A

   Next question

10. Question 50 · 207 in bank

    Which of the following items is NOT an example of Security as a Service (SecaaS)?

    • ASpam filtering
    • BAuthentication
    • CProvisioning
    • DWeb filtering
    • EIntrusion detection

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CCSK practice, question 41. 207 questions available.